Description
Cross-site scripting (XSS) vulnerability in FacileForms before 1.4.7 for Mambo and Joomla!, when either register_globals or RG_EMULATION is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- 20254 vdb-entry
- 22125 third-party-advisory
- 29237 vdb-entry
- ADV-2006-3817 vdb-entry
- http://www.facileforms.biz/content/view/108/140/