PT-2006-5268 · Open Source Matters · Joomla!

Publicado 2006-08-31 · Atualizado 2021-10-01 · CVE-2006-4468

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.0.11

Description The issue is related to multiple unspecified vulnerabilities in Joomla!, involving unvalidated input. This affects various components, including the mosMail, JosIsValidEmail, and josSpoofValue functions, as well as the lack of inclusion of globals.php in administrator/index.php, the Admin User Manager, and the poll module. The impact of these vulnerabilities is unknown.

Recommendations For versions prior to 1.0.11, update to version 1.0.11 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected components, such as the Admin User Manager and the poll module, until the update is applied. Additionally, ensure that all input is properly validated to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2006-4468

Produtos afetados

Joomla!

Referências · 7

• http://joomla.org/content/view/1843/74 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28628 · Nota
• http://secunia.com/advisories/21666 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-4468 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4468 · Nota
• http://vupen.com/english/advisories/2006/3408 · Nota
• http://joomla.org/content/view/1841/78 · Aviso do Fabricante