PT-2006-5271 · Joomla · Joomla!

Published 2006-08-31 · Updated 2021-10-04 · CVE-2006-4471

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.0.11

Description The issue concerns the Admin Upload Image functionality, which allows remote authenticated users to upload files outside of the intended directory via unspecified vectors.

Recommendations For versions prior to 1.0.11, update to version 1.0.11 or later to resolve the issue.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2006-4471

Affected Products

Joomla!

References · 7

• http://joomla.org/content/view/1843/74 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4471 · Security Note
• http://joomla.org/content/view/1841/78 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28630 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4471 · Note
• http://secunia.com/advisories/21666 · Note
• http://vupen.com/english/advisories/2006/3408 · Note