CVE-2006-3480: XSS
Published Jul 10, 2006
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.10 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters involving the (1) getUserStateFromRequest function, and the (2) SEF and (3) commessages modules.
Affected Software
9 affected components
Joomla joomla=1.0.9
Joomla joomla=1.0
Joomla joomla=1.0.1
Joomla joomla=1.0.3
Joomla joomla=1.0.8
Joomla joomla=1.0.4
Joomla joomla=1.0.2
Joomla joomla=1.0.5
Joomla joomla=1.0.7
Remediation
Patch Available
Event History
Jul 10, 2006
CVE Published
08:05 PM
Jul 11, 2006
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3480?
CVE-2006-3480 has a medium severity rating as it involves multiple cross-site scripting vulnerabilities.
2
How do I fix CVE-2006-3480?
To fix CVE-2006-3480, you should upgrade Joomla! to version 1.0.10 or later.
3
What versions of Joomla! are affected by CVE-2006-3480?
Joomla! versions 1.0 through 1.0.9 are affected by CVE-2006-3480.
4
Can CVE-2006-3480 lead to an unauthorized access?
Yes, CVE-2006-3480 can allow remote attackers to inject arbitrary web scripts which could lead to unauthorized access.
5
What type of vulnerability is CVE-2006-3480?
CVE-2006-3480 is classified as a cross-site scripting (XSS) vulnerability.