CVE-2011-2710

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URI to includes/application.php, reachable through index.php; and, when Internet Explorer or Konqueror is used, (2) allow remote attackers to inject arbitrary web script or HTML via the searchword parameter in a search action to index.php in the com_search component. NOTE: vector 2 exists because of an incomplete fix for CVE-2011-2509.5.

We have discovered 269,324 live websites that are affected by CVE-2011-2710.

Test my site



Affected Software

Product  Joomla
Category Content Management System
Vulnerable Domains269,324 live websites (96.96% of Joomla install base)
Vulnerable Versions
  • from 0 through 1.7
Vulnerable Versions Count5 versions ( 2.98% of all versions)



Details

  • Published - Jul 28, 2011
  • Updated - Aug 6, 2024

CVE-2011-2710 usage by Country

United States15,650 websites


Italy66,475 websites
Australia24,778 websites
GB16,650 websites
Germany13,922 websites
Russia13,653 websites
Poland12,647 websites
Netherlands11,490 websites
Iran9,178 websites
South Africa8,919 websites

CVE-2011-2710 usage by TLD

.com65,530 websites
.it43,653 websites
.com.au17,023 websites
.ru11,702 websites
.pl9,044 websites
.co.uk8,967 websites
.org7,412 websites
.nl6,830 websites
.de6,636 websites
.net5,799 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2011-2710

Top websites that are affected by CVE-2011-2710. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****************.de Germany*,***
*******.**.ca Canada*,***
**************.********.com United States**,***
***********.com Italy**,***
***********.**.za South Africa**,***
********.com Serbia**,***
***************.com Italy**,***
********.com United States**,***
*********.com GB**,***
*****.**.uk GB**,***
See full domain list

FAQ

A total of 269,324 websites have been identified as vulnerable to CVE-2011-2710, discovered through global website indexing conducted by WebTechSurvey.
Joomla is susceptible to CVE-2011-2710 vulnerability.
Joomla versions before, and including, 1.7 are vulnerable to CVE-2011-2710.