CVE-2007-5577

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Section Name form fields in the Section Manager component, or (3) multiple unspecified fields in New Menu Item.

• CWE-79

• http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=5654Patch, Vendor Advisory
• http://osvdb.org/37173Broken Link
• http://secunia.com/advisories/25804Patch, Vendor Advisory
• http://www.joomla.org/content/view/3670/78/Release Notes, Vendor Advisory
• http://www.joomla.org/content/view/3677/1/Vendor Advisory
• http://www.securityfocus.com/bid/24663Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35119Third Party Advisory, VDB Entry
• http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=5654Patch, Vendor Advisory
• http://osvdb.org/37173Broken Link
• http://secunia.com/advisories/25804Patch, Vendor Advisory
• http://www.joomla.org/content/view/3670/78/Release Notes, Vendor Advisory
• http://www.joomla.org/content/view/3677/1/Vendor Advisory
• http://www.securityfocus.com/bid/24663Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35119Third Party Advisory, VDB Entry

Published

Oct 18, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-5571Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and…
• CVE-2007-5572Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2007-5573PHP remote file inclusion vulnerability in classes/core/lang…
• CVE-2007-5574PHP remote file inclusion vulnerability in djpage.php in PHP…
• CVE-2007-5575Cross-site request forgery (CSRF) vulnerability in 1024 CMS …
• CVE-2007-5576BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLog…
• CVE-2007-5578Basic Analysis and Security Engine (BASE) before 1.3.8 sends…
• CVE-2007-5579login.php in Pligg CMS 9.5 uses a guessable confirmation cod…
• CVE-2007-5580Buffer overflow in a certain driver in Cisco Security Agent …
• CVE-2007-5581Multiple cross-site scripting (XSS) vulnerabilities in mpweb…
• CVE-2007-5582Cross-site scripting (XSS) vulnerability in the login page i…
• CVE-2007-5583Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote…