CVE-2006-0114: Medium severity Joomla joomla vulnerability
The vCard functions in Joomla! 1.0.5 use predictable sequential IDs for vcards and do not restrict access to them, which allows remote attackers to obtain valid e-mail addresses to conduct spam attacks by modifying the contactid parameter to index2.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0114?
CVE-2006-0114 is considered a critical vulnerability due to its potential for exposing valid email addresses and facilitating spam attacks.
How do I fix CVE-2006-0114?
To fix CVE-2006-0114, upgrade Joomla! to a later version that addresses this vulnerability.
What systems are affected by CVE-2006-0114?
CVE-2006-0114 specifically affects Joomla! version 1.0.5.
What type of attack can be executed through CVE-2006-0114?
CVE-2006-0114 can be exploited to conduct spam attacks by accessing valid email addresses.
How does CVE-2006-0114 compromise user information?
CVE-2006-0114 compromises user information by allowing attackers to predictably access vCard information without restriction.