Lucene search

[email protected]CVE-2006-7009

HistoryFeb 12, 2007 - 11:28 p.m.

CVE-2006-7009

2007-02-1223:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

joomla

cve-2006-7009

remote attackers

spoofing

form submission

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.5%

JSON

Joomla! before 1.0.10 allows remote attackers to spoof the frontend submission forms, which has unknown impact and attack vectors.

CPENameOperatorVersion
joomla:joomlajoomlaeq1.0.9
joomla:joomlajoomlaeq1.0.1
joomla:joomlajoomlaeq1.0.3
joomla:joomlajoomlaeq1.0.6
joomla:joomlajoomlaeq1.0.8
joomla:joomlajoomlaeq1.0.4
joomla:joomlajoomlaeq1.0.2
joomla:joomlajoomlaeq1.0.5
joomla:joomlajoomlaeq1.0.7
joomla:joomlajoomlaeq1.0.0

CPE	Name	Operator	Version
joomla:joomla	joomla	eq	1.0.9
joomla:joomla	joomla	eq	1.0.1
joomla:joomla	joomla	eq	1.0.3
joomla:joomla	joomla	eq	1.0.6
joomla:joomla	joomla	eq	1.0.8
joomla:joomla	joomla	eq	1.0.4
joomla:joomla	joomla	eq	1.0.2
joomla:joomla	joomla	eq	1.0.5
joomla:joomla	joomla	eq	1.0.7
joomla:joomla	joomla	eq	1.0.0

References

secunia.com/advisories/20874

www.joomla.org/content/view/1510/74/

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.5%

JSON

Related for CVE-2006-7009

cvelist1 securityvulns1