Description

The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to cause a denial of service (disk consumption and possibly web-server outage) via multiple requests with different values of the feed parameter.

Remediation

References

CVE-2006-1957

Related Vulnerabilities

Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5877)

WordPress Plugin Favicon by RealFaviconGenerator Cross-Site Scripting (1.3.20)

WordPress Plugin JSON API User Unspecified Vulnerability (3.9.6)

WordPress Plugin Catchers Helpdesk and Ticket system for Support Cross-Site Scripting (1.0.3)

Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-0837)

Severity

Medium

Classification

CVE-2006-1957 CWE-20

Tags

Missing Update Known Vulnerabilities