CVE-2006-3481
Summary
| CVE | CVE-2006-3481 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-07-10 20:05:00 UTC |
| Updated | 2017-07-20 01:32:00 UTC |
| Description | Multiple SQL injection vulnerabilities in Joomla! before 1.0.10 allow remote attackers to execute arbitrary SQL commands via unspecified parameters involving the (1) "Remember Me" function, (2) "Related Items" module, and the (3) "Weblinks submission". |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Joomla | Joomla | 1.0 | All | All | All |
| Application | Joomla | Joomla | 1.0.1 | All | All | All |
| Application | Joomla | Joomla | 1.0.2 | All | All | All |
| Application | Joomla | Joomla | 1.0.3 | All | All | All |
| Application | Joomla | Joomla | 1.0.4 | All | All | All |
| Application | Joomla | Joomla | 1.0.5 | All | All | All |
| Application | Joomla | Joomla | 1.0.7 | All | All | All |
| Application | Joomla | Joomla | 1.0.8 | All | All | All |
| Application | Joomla | Joomla | 1.0.9 | All | All | All |
| Application | Joomla | Joomla | 1.0 | All | All | All |
| Application | Joomla | Joomla | 1.0.1 | All | All | All |
| Application | Joomla | Joomla | 1.0.2 | All | All | All |
| Application | Joomla | Joomla | 1.0.3 | All | All | All |
| Application | Joomla | Joomla | 1.0.4 | All | All | All |
| Application | Joomla | Joomla | 1.0.5 | All | All | All |
| Application | Joomla | Joomla | 1.0.7 | All | All | All |
| Application | Joomla | Joomla | 1.0.8 | All | All | All |
| Application | Joomla | Joomla | 1.0.9 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Joomla! | CONFIRM | www.joomla.org | |
| Joomla! | CONFIRM | www.joomla.org | |
| 26910 | OSVDB | www.osvdb.org | |
| Joomla! Cross-Site Scripting and SQL Injection Vulnerabilities - Advisories - Secunia | SECUNIA | secunia.com | Patch, Vendor Advisory |
| 26912 | OSVDB | www.osvdb.org | |
| 26911 | OSVDB | www.osvdb.org | |
| Joomla! Multiple Input Validation Vulnerabilities | BID | www.securityfocus.com | Patch |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.