CVE-2006-4468

Опубликовано: 31 авг. 2006

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to unvalidated input, allow attackers to have an unknown impact via unspecified vectors involving the (1) mosMail, (2) JosIsValidEmail, and (3) josSpoofValue functions; (4) the lack of inclusion of globals.php in administrator/index.php; (5) the Admin User Manager; and (6) the poll module.

Ссылки

http://secunia.com/advisories/21666
Vendor Advisory
http://www.joomla.org/content/view/1841/78/
Vendor Advisory
http://www.joomla.org/content/view/1843/74/
Vendor Advisory
http://www.vupen.com/english/advisories/2006/3408
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28628
Third Party Advisory
VDB Entry
http://secunia.com/advisories/21666
Vendor Advisory
http://www.joomla.org/content/view/1841/78/
Vendor Advisory
http://www.joomla.org/content/view/1843/74/
Vendor Advisory
http://www.vupen.com/english/advisories/2006/3408
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28628
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*

Версия до 1.0.11 (исключая)

EPSS

Процентиль: 6%

0.00025

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-82q8-587c-j44m

github

почти 4 года назад