Joomla! "searchword" Cross-Site Scripting Vulnerability

Aung Khant has discovered a vulnerability in Joomla!, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed via the "searchword" POST parameter to index.php (when "option" is set to "com_search" and "task" is set to "search") is not properly sanitised in the "redirect()" function in libraries/joomla/application/application.php before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Successful exploitation requires that "magic_quotes_gpc" is disabled. http://bl0g.yehg.net/2011/07/joomla-170-rc-and-lower-multiple-cross.html