NVD

Id
63111  
Name
CVE-2006-4476  
Description
Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to "Injection Flaws," allow attackers to have an unknown impact via (1) globals.php, which uses include_once() instead of require(); (2) the $options variable; (3) Admin Upload Image; (4) ->load(); (5) content submissions when frontpage is selected; (6) the mosPageNav constructor; (7) saveOrder functions; (8) the absence of "exploit blocking rules" in htaccess; and (9) the ACL.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-31  
Modified Date
2011-03-07  
Seq
2006-4476  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
328619 63111 CVE-2006-4476 http://www.joomla.org/content/view/1841/78/  View
328620 63111 CVE-2006-4476 http://www.joomla.org/content/view/1843/74/  View
328621 63111 CVE-2006-4476 ADV-2006-3408  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59760 JVNDB-2006-002026 Joomla! における脆弱性 Joomla! は、"インジェクションの欠陥" の不備があるため、不特定の影響を受ける脆弱性が存在します。 CVE-2006-4476 20578 CVE-2006-4476 63111 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002026.html 2006-08-31 2012-09-25 View