CVE:CVE-2007-5427
CNNVD:CNNVD-200710-224
Joomla! 1.0.13版本及其早期版本的com_search组件中存在跨站脚本攻击漏洞。远程攻击者可以借助searchword参数，注入任意web脚本或HTML。
solution:Upgrade joomla com_search_component to a higher version than *; Upgrade joomla joomla to a higher version than 1.0.13,and avoid the version (,1.0.13]