Description

Joomla! before 1.0.11 does not limit access to the Admin Popups functionality, which has unknown impact and attack vectors.

Remediation

References

CVE-2006-4475

Related Vulnerabilities

XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29527)

WordPress Plugin Gutenberg Forms-WordPress Form Builder Arbitrary File Upload (2.2.9)

Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-33338)

WordPress Plugin Row Seats Core Unspecified Vulnerability (2.66)

XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-46731)

Severity

High

Classification

CVE-2006-4475 CWE-264

Tags

Missing Update Known Vulnerabilities