Vulnerability Details CVE-2006-3481
Multiple SQL injection vulnerabilities in Joomla! before 1.0.10 allow remote attackers to execute arbitrary SQL commands via unspecified parameters involving the (1) "Remember Me" function, (2) "Related Items" module, and the (3) "Weblinks submission".
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 74.1%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/20874
- http://www.joomla.org/content/view/1510/74/
- http://www.joomla.org/content/view/1511/78/
- http://www.osvdb.org/26910
- http://www.osvdb.org/26911
- http://www.osvdb.org/26912
- http://www.securityfocus.com/bid/18742
- http://www.vupen.com/english/advisories/2006/2608
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27520
- http://secunia.com/advisories/20874
- http://www.joomla.org/content/view/1510/74/
- http://www.joomla.org/content/view/1511/78/
- http://www.osvdb.org/26910
- http://www.osvdb.org/26911
- http://www.osvdb.org/26912
- http://www.securityfocus.com/bid/18742
- http://www.vupen.com/english/advisories/2006/2608
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27520
Products affected by CVE-2006-3481
-
cpe:2.3:a:joomla:joomla:1.0
-
cpe:2.3:a:joomla:joomla:1.0.1
-
cpe:2.3:a:joomla:joomla:1.0.2
-
cpe:2.3:a:joomla:joomla:1.0.3
-
cpe:2.3:a:joomla:joomla:1.0.4
-
cpe:2.3:a:joomla:joomla:1.0.5
-
cpe:2.3:a:joomla:joomla:1.0.7
-
cpe:2.3:a:joomla:joomla:1.0.8
-
cpe:2.3:a:joomla:joomla:1.0.9