Lucene search

MitreCVE-2006-4474

HistoryAug 31, 2006 - 8:04 p.m.

CVE-2006-4474

2006-08-3120:04:00

mitre

web.nvd.nist.gov

joomla

1.0.11

xss

vulnerabilities

admin module manager

admin help

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.1

Confidence

High

EPSS

0.011

Percentile

84.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.11 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) Admin Module Manager, (2) Admin Help, and (3) Search.

Affected configurations

Nvd

Node

joomlajoomlaRange≤1.0.10

joomlajoomlaMatch1.0.9

VendorProductVersionCPE
joomlajoomla*cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
joomlajoomla1.0.9cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
joomla	joomla	*	cpe:2.3:a:joomla:joomla::::::::
joomla	joomla	1.0.9	cpe:2.3:a:joomla:joomla:1.0.9:::::::*

References

secunia.com/advisories/21666

www.joomla.org/content/view/1841/78/

www.joomla.org/content/view/1843/74/

www.vupen.com/english/advisories/2006/3408

exchange.xforce.ibmcloud.com/vulnerabilities/28633

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.1

Confidence

High

EPSS

0.011

Percentile

84.8%

JSON

Related for CVE-2006-4474