PT-2006-5268 · Open Source Matters · Joomla!

Published 2006-08-31 · Updated 2021-10-01 · CVE-2006-4468

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.0.11

Description The issue is related to multiple unspecified vulnerabilities in Joomla!, involving unvalidated input. This affects various components, including the mosMail, JosIsValidEmail, and josSpoofValue functions, as well as the lack of inclusion of globals.php in administrator/index.php, the Admin User Manager, and the poll module. The impact of these vulnerabilities is unknown.

Recommendations For versions prior to 1.0.11, update to version 1.0.11 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected components, such as the Admin User Manager and the poll module, until the update is applied. Additionally, ensure that all input is properly validated to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2006-4468

Affected Products

Joomla!

References · 7

• http://joomla.org/content/view/1843/74 · Vendor Advisory
• http://secunia.com/advisories/21666 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4468 · Security Note
• http://joomla.org/content/view/1841/78 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28628 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4468 · Note
• http://vupen.com/english/advisories/2006/3408 · Note