CVE-2006-4474

Joomla! < 1.0.11 - Cross-Site Scripting via Admin Module Manager, Admin Help, and Search Parameters

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.11 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) Admin Module Manager, (2) Admin Help, and (3) Search.

References (5)

Core 5
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3408
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/28633
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21666
Various Sources x_refsource_confirm
http://www.joomla.org/content/view/1843/74/

Scores

EPSS 0.0005
EPSS Percentile 14.3%

Details

Status published
Products (2)
joomla/joomla 1.0.9
joomla/joomla < 1.0.10
Published Aug 31, 2006
Tracked Since Feb 18, 2026