Mambo Open Source 4.6 - 'Itemid' Cross-Site Scripting

Author: David Sopas Ferreira
type: webapps
platform: php
port: 
date_added: 2004-02-05  
date_updated: 2012-12-25  
verified: 1  
codes: CVE-2004-2072;OSVDB-3833  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 23657.txt  

source: https://www.securityfocus.com/bid/9588/info

It has been reported that Mambo Open Source may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute arbitrary HTML or script code in a user's browser. The issue exists in the 'Itemid' parameter of 'index.php' script.

Mambo Open Source version 4.6 has been reported to be prone to this issue, however, other versions may be affected has well.

http://www.example.com/index.php?option=content&task=view&id=1&Itemid="><script>alert(document.domain);</script>