Posted on Friday, December 08, 2006 @ 06:58:17 CST in Security
by Raven
SECUNIA ADVISORY ID: SA23160
VERIFY ADVISORY: http://secunia.com/advisories/23160/
CRITICAL: Moderately critical
IMPACT: Cross Site Scripting, Exposure of sensitive information
SOFTWARE: JCE Admin Component 1.x (component for Joomla) - http://secunia.com/product/12839/
DESCRIPTION: Gummiente has discovered some vulnerabilities in the JCE Admin component for Joomla, which can be exploited by malicious people to conduct cross-site scripting attacks and disclose sensitive information. Read More...