CVE-2006-3480: XSS
First published: Mon Jul 10 2006(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.10 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters involving the (1) getUserStateFromRequest function, and the (2) SEF and (3) com_messages modules.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Joomla | =1.0 | |
| Joomla | =1.0.1 | |
| Joomla | =1.0.2 | |
| Joomla | =1.0.3 | |
| Joomla | =1.0.4 | |
| Joomla | =1.0.5 | |
| Joomla | =1.0.7 | |
| Joomla | =1.0.8 | |
| Joomla | =1.0.9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.joomla.org/content/view/1510/74/
- http://www.joomla.org/content/view/1511/78/
- http://www.securityfocus.com/bid/18742
- http://secunia.com/advisories/20874
- http://www.osvdb.org/26913
- http://www.osvdb.org/26917
- http://www.osvdb.org/26918
- http://www.vupen.com/english/advisories/2006/2608
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27521
Frequently Asked Questions
What is the severity of CVE-2006-3480?
CVE-2006-3480 has a medium severity rating as it involves multiple cross-site scripting vulnerabilities.
How do I fix CVE-2006-3480?
To fix CVE-2006-3480, you should upgrade Joomla! to version 1.0.10 or later.
What versions of Joomla! are affected by CVE-2006-3480?
Joomla! versions 1.0 through 1.0.9 are affected by CVE-2006-3480.
Can CVE-2006-3480 lead to an unauthorized access?
Yes, CVE-2006-3480 can allow remote attackers to inject arbitrary web scripts which could lead to unauthorized access.
What type of vulnerability is CVE-2006-3480?
CVE-2006-3480 is classified as a cross-site scripting (XSS) vulnerability.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/author
- agent/severity
- agent/last-modified-date
- agent/remedy
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/joomla
- canonical/joomla
- version/joomla/1.0
- version/joomla/1.0.1
- version/joomla/1.0.2
- version/joomla/1.0.3
- version/joomla/1.0.4
- version/joomla/1.0.5
- version/joomla/1.0.7
- version/joomla/1.0.8
- version/joomla/1.0.9