CVE-2006-4474: XSS
Published Aug 31, 2006
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.11 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) Admin Module Manager, (2) Admin Help, and (3) Search.
Affected Software
2 affected components
Joomla joomla=1.0.9
Joomla joomla<=1.0.10
Remediation
Patch Available
Event History
Aug 31, 2006
CVE Published
08:04 PM
Sep 1, 2006
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-4474?
CVE-2006-4474 has a medium severity rating due to the potential for cross-site scripting attacks.
2
Which versions of Joomla! are affected by CVE-2006-4474?
CVE-2006-4474 affects Joomla! versions 1.0.9 and earlier up to 1.0.10.
3
How do I fix CVE-2006-4474?
To fix CVE-2006-4474, upgrade Joomla! to version 1.0.11 or later.
4
What types of vulnerabilities are associated with CVE-2006-4474?
CVE-2006-4474 involves multiple cross-site scripting (XSS) vulnerabilities that allow remote script injections.
5
Can CVE-2006-4474 be exploited by attackers?
Yes, attackers can exploit CVE-2006-4474 to execute arbitrary web scripts or HTML on affected Joomla! installations.