CVE-2006-4476

Multiple unspecified vulnerabilities in Joomla!

published August 31, 2006

CVSS
—
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to "Injection Flaws," allow attackers to have an unknown impact via (1) globals.php, which uses include_once() instead of require(); (2) the $options variable; (3) Admin Upload Image; (4) ->load(); (5) content submissions when frontpage is selected; (6) the mosPageNav constructor; (7) saveOrder functions; (8) the absence of "exploit blocking rules" in htaccess; and (9) the ACL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01378 · 71.9th percentile
Published
2006-08-31T20:00Z
EPSS history
Timeline
  • 31 AUG 20:00Z
    Multiple unspecified vulnerabilities in Joomla!
    cvelistv5