Vulnerability Name:

CVE-2006-6833 (CCN-31159)

Assigned:2006-12-12
Published:2006-12-12
Updated:2011-03-08
Summary:com_categories in Joomla! before 1.0.12 does not validate input, which has unknown impact and remote attack vectors.
CVSS v3 Severity:5.6 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
5.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
5.1 Medium (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P)
3.8 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2006-6833

Source: MITRE
Type: CNA
CVE-2006-6834

Source: CCN
Type: JP Vendor Status Notes Web site
JVN#45006961:Joomla!

Source: JVN
Type: UNKNOWN
JVN#45006961

Source: CCN
Type: SA23563
Joomla! Multiple Vulnerabilities

Source: SECUNIA
Type: Patch, Vendor Advisory
23563

Source: CCN
Type: Joomla! Web site
Joomla! - Joomla! 1.0.12 Released

Source: CONFIRM
Type: UNKNOWN
http://www.joomla.org/content/view/2495/78/

Source: CCN
Type: OSVDB ID: 32521
Joomla! com_categories Unspecified Input Validation Weakness

Source: CCN
Type: OSVDB ID: 32536
Joomla! Multiple Unspecified Issues

Source: BID
Type: Patch
21810

Source: CCN
Type: BID-21810
Joomla! Unspecified Cross-Site Scripting Vulnerability And Multiple Unspecified Vulnerabilities

Source: VUPEN
Type: UNKNOWN
ADV-2006-5202

Source: XF
Type: UNKNOWN
joomla-uspecified(31159)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:joomla:joomla:1.0:*:*:*:*:*:*:*
  • OR cpe:/a:joomla:joomla:1.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:joomla:joomla:1.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:joomla:joomla:1.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:joomla:joomla:1.0.4:*:*:*:*:*:*:*
  • OR cpe:/a:joomla:joomla:1.0.5:*:*:*:*:*:*:*
  • OR cpe:/a:joomla:joomla:1.0.7:*:*:*:*:*:*:*
  • OR cpe:/a:joomla:joomla:1.0.8:*:*:*:*:*:*:*
  • OR cpe:/a:joomla:joomla:1.0.9:*:*:*:*:*:*:*
  • OR cpe:/a:joomla:joomla:1.0.10:*:*:*:*:*:*:*
  • OR cpe:/a:joomla:joomla:1.0.11:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    BACK
    joomla joomla 1.0
    joomla joomla 1.0.1
    joomla joomla 1.0.2
    joomla joomla 1.0.3
    joomla joomla 1.0.4
    joomla joomla 1.0.5
    joomla joomla 1.0.7
    joomla joomla 1.0.8
    joomla joomla 1.0.9
    joomla joomla 1.0.10
    joomla joomla 1.0.11