CVE-2006-1029

Joomla! 1.0.7 - Denial of Service via Malformed mosmsg Parameter

Title source: llm
STIX 2.1

Description

The cross-site scripting (XSS) countermeasures in class.inputfilter.php in Joomla! 1.0.7 allow remote attackers to cause a denial of service via a crafted mosmsg parameter to index.php with a malformed sequence of multiple tags, as demonstrated using "<<>AAA<><>", possibly due to nested or empty tags.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/426538/100/0/threaded
Exploit vdb-entry x_refsource_osvdb
http://www.osvdb.org/23816
Various Sources x_refsource_misc
http://www.joomla.org/content/view/938/78/

Scores

EPSS 0.0008
EPSS Percentile 23.4%

Details

Status published
Products (1)
joomla/joomla 1.0.7
Published Mar 07, 2006
Tracked Since Feb 18, 2026