CVE-2006-4476
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2006-4476
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to "Injection Flaws," allow attackers to have an unknown impact via (1) globals.php, which uses include_once() instead of require(); (2) the $options variable; (3) Admin Upload Image; (4) ->load(); (5) content submissions when frontpage is selected; (6) the mosPageNav constructor; (7) saveOrder functions; (8) the absence of "exploit blocking rules" in htaccess; and (9) the ACL.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Joomla! 多个权限许可和访问控制漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Joomla! .0.11之前的版本存在多个不明漏洞，有"注入攻击"有关，远程攻击者可借助以下向量造成不明影响：(1) globals.php脚本，使用include_once()函数而非require()函数； (2) $options变量；(3) 管理员上传图像；(4) ->load()函数；(5) 选定主页后的内容提交；(6) mosPageNav构造函数；(7) saveOrder函数；(8) htaccess和(9) ACL中缺少"漏洞利用禁止规则"。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2006-4476
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2006-4476
Please Login to view more intelligence information
- http://www.joomla.org/content/view/1841/78/x_refsource_CONFIRM
- http://www.joomla.org/content/view/1843/74/x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2006-4476
Same Patch Batch · n/a · 2006-08-31 · 55 CVEs total
| CVE-2006-4463 | Jetstat.com JS ASP Faq Manager 多个SQL注入漏洞 | |
| CVE-2006-4458 | PhpGroupWare日历模块'class.holidaycalc.inc.php'路径遍历漏洞 | |
| CVE-2006-4473 | Joomla中com_content 不明填表寄信和邮件发送漏洞 | |
| CVE-2006-4456 | phpECard functions.php和index.php'远程文件包含漏洞 | |
| CVE-2006-4475 | Joomla! Admin Popups功能权限许可和访问控制漏洞 | |
| CVE-2006-4474 | Joomla! 多个跨站脚本攻击漏洞 | |
| CVE-2006-4457 | phpECard 'index.php'include_path参数HP远程文件包含漏洞 | |
| CVE-2006-4466 | Joomla! unset PHP指令bug 未明安全漏洞 | |
| CVE-2006-4465 | Microsoft终端服务器Explorer错误任意代码执行漏洞 | |
| CVE-2006-4464 | Nokia Browser 超大Unicode字符串拒绝服务攻击漏洞 | |
| CVE-2006-4467 | Simple Machines Forum unset PHP指令BUG 目录遍历漏洞 | |
| CVE-2006-4462 | Gonafish.com LinksCaffe 'admin1953.php' 安全权限获得漏洞 | |
| CVE-2006-4461 | Paessler IPCheck Server Monitor 探测器设置未明安全漏洞 | |
| CVE-2006-4460 | PHP iAddressBook未明跨站脚本攻击漏洞 | |
| CVE-2006-4486 | PHP 分配例程整型溢出漏洞 | |
| CVE-2006-4485 | PHP stripos函数未明攻击漏洞 | |
| CVE-2006-4484 | PHP 'gd_gif_in.c'LWZReadByte_函数缓冲区溢出漏洞 | |
| CVE-2006-4483 | PHP 'open_basedir或safe_mode'远程输入错误漏洞 | |
| CVE-2006-4482 | PHP 'string.c'多个堆缓冲区错误漏洞 | |
| CVE-2006-4481 | PHP 多个输入验证漏洞 |
Showing top 20 of 55 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8261
Squirrel sqobject.cpp Load heap-based overflow - CVE-2026-8258
Squirrel sqstdstring.cpp validate_format stack-based overflo - CVE-2026-8252
Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer - CVE-2026-8251
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo - CVE-2026-8250
Open5GS SMF n4-build.c smf_n4_build_qos_flow_to_modify_list
V. Comments for CVE-2006-4476
No comments yet