Lucene search

K

6 matches found

CVE
CVE
added 2006/08/31 8:4 p.m.55 views

CVE-2006-4469

Unspecified vulnerability in PEAR.php in Joomla! before 1.0.11 allows remote attackers to perform "remote execution," related to "Injection Flaws."

7.5CVSS6.7AI score0.00211EPSS
CVE
CVE
added 2006/08/31 8:4 p.m.44 views

CVE-2006-4468

Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to unvalidated input, allow attackers to have an unknown impact via unspecified vectors involving the (1) mosMail, (2) JosIsValidEmail, and (3) josSpoofValue functions; (4) the lack of inclusion of globals.php in administrator/i...

6.8CVSS6.8AI score0.00026EPSS
CVE
CVE
added 2006/04/21 10:2 a.m.43 views

CVE-2006-1957

The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to cause a denial of service (disk consumption and possibly web-server outage) via multiple requests with different values of the feed parameter.

5CVSS6.8AI score0.00283EPSS
CVE
CVE
added 2006/08/31 8:4 p.m.39 views

CVE-2006-4471

The Admin Upload Image functionality in Joomla! before 1.0.11 allows remote authenticated users to upload files outside of the /images/stories/ directory via unspecified vectors.

6.5CVSS6.6AI score0.00093EPSS
CVE
CVE
added 2006/08/31 8:4 p.m.38 views

CVE-2006-4472

Multiple unspecified vulnerabilities in Joomla! before 1.0.11 allow attackers to bypass user authentication via unknown vectors involving the (1) do_pdf command and the (2) emailform com_content task.

7.5CVSS7.5AI score0.00069EPSS
CVE
CVE
added 2006/08/31 8:4 p.m.35 views

CVE-2006-4470

Joomla! before 1.0.11 omits some checks for whether _VALID_MOS is defined, which allows attackers to have an unknown impact, possibly resulting in PHP remote file inclusion.

7.5CVSS7.2AI score0.00209EPSS