Vulnerability Details CVE-2006-3481
Multiple SQL injection vulnerabilities in Joomla! before 1.0.10 allow remote attackers to execute arbitrary SQL commands via unspecified parameters involving the (1) "Remember Me" function, (2) "Related Items" module, and the (3) "Weblinks submission".
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.8%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/20874
- http://www.joomla.org/content/view/1510/74/
- http://www.joomla.org/content/view/1511/78/
- http://www.osvdb.org/26910
- http://www.osvdb.org/26911
- http://www.osvdb.org/26912
- http://www.securityfocus.com/bid/18742
- http://www.vupen.com/english/advisories/2006/2608
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27520
- http://secunia.com/advisories/20874
- http://www.joomla.org/content/view/1510/74/
- http://www.joomla.org/content/view/1511/78/
- http://www.osvdb.org/26910
- http://www.osvdb.org/26911
- http://www.osvdb.org/26912
- http://www.securityfocus.com/bid/18742
- http://www.vupen.com/english/advisories/2006/2608
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27520
Products affected by CVE-2006-3481
-
cpe:2.3:a:joomla:joomla:1.0
-
cpe:2.3:a:joomla:joomla:1.0.1
-
cpe:2.3:a:joomla:joomla:1.0.2
-
cpe:2.3:a:joomla:joomla:1.0.3
-
cpe:2.3:a:joomla:joomla:1.0.4
-
cpe:2.3:a:joomla:joomla:1.0.5
-
cpe:2.3:a:joomla:joomla:1.0.7
-
cpe:2.3:a:joomla:joomla:1.0.8
-
cpe:2.3:a:joomla:joomla:1.0.9