Acunetix discovered XSS vulnerabilities! (localhost site) - Joomla! Forum - community, help and support

-

hi,

first of all, apologize english.

acunetix discovered xss vulnerabilities on localhost joomla! 2.5.8 website.

there more 5000 high level alerts found (and scanning not finished)!

image

as can see (there many results , dont understand everything), vulnerabilities related contact forms.
in cases, these vulnerability descriptions:

attack details
path fragment input - set 09" onmouseover=prompt(936561) bad="
the input reflected inside tag parameter between double quotes.

attack details
url encoded input limitstart set 0" onmouseover=prompt(949486) bad="
the input reflected inside tag parameter between double quotes.

attack details
url encoded input start set 5" onmouseover=prompt(931283) bad="
the input reflected inside tag parameter between double quotes.

attack details
url encoded input amp;view set featured" onmouseover=prompt(992604) bad="
the input reflected inside tag parameter between double quotes.

attack details
url encoded input amp;limitstart set 0" onmouseover=prompt(916266) bad="
the input reflected inside tag parameter between double quotes.

attack details
url encoded input task set weblink.go" onmouseover=prompt(917344) bad="
the input reflected inside tag parameter between double quotes.


...


i finished site, , plans copy remote host... but, after these results not know :eek: :eek: :eek:

please, can give me advice.

please scanning script developer report here response





Comments

Post a Comment

Popular posts from this blog

How to change text Component easybook reloaded *newbee* - Joomla! Forum - community, help and support

-
Image
hi all, i started building websites joomla not long ago, can use help.. for got problem guestbook. i have installed easybook. , running on following website http://odoorn321.nl/ (under gastenboek) i want change text: waardering website (is dutch valuate website) waardering. idea rid of word website, because have valuate vacation home, not website. i have made screenshot of text want change. where , how going find css file change text? your appreciated! thanks no one? Board index Joomla! Older Version Support Joomla! 2.5 General Questions/New to Joomla! 2.5
Read more

After Effect warning: A problem occurred when processing OpenGL commands

-
i have after effects cs6 in computer cs5.5 installed. 64bit windows 7 ultimate 20gb memory , 2 amd radeon hd 6900 series display adapters drivers updated hour ago (driver date 27.7.2012, version 8.982.0.0).   when trying use after ecffects, error message " after effect warning: problem occurred when processing opengl commands " when clicking composition window.   what done? not much, i'm afraid. need older graphics driver. other disable second card or play configuration. unfortunately not smart person decided cs6 no longer need manual opengl control user, there's no way suppress within program force-revert software-only modes in case of such issues...   mylenium More discussions in After Effects adobe
Read more

Preconditions Failed. - Joomla! Forum - community, help and support

-
hello! i'm having problem; every time click save&close button, or save button, or close button module; following message appears: "precondition failed the precondition on request url /administrator/index.php evaluated false. additionally, 404 not found error encountered while trying use errordocument handle request." it happens modules. thanks in advance. problem description :: forum post assistant (v1.2.3) : 13th november 2012 wrote: can\'t save changes or close module. log/error message :: forum post assistant (v1.2.3) : 13th november 2012 wrote: precondition failed precondition on request url /administrator/index.php evaluated false. additionally, 404 not found error encountered while trying use errordocument handle request. last php error(s) reported :: forum post assistant (v1.2.3) : 13th november 2012 wrote: [04-mar-2012 01:25:56] php fatal error: call member function get() on non-object in /home/joommmy1/addon/youngstaer/sub/teenace/public_html/templates/...
Read more