134 lines
4.1 KiB
JSON
Raw Normal View History

2023-04-24 12:24:31 +02:00
{
"id": "CVE-2006-1048",
"sourceIdentifier": "cve@mitre.org",
"published": "2006-03-07T11:02:00.000",
"lastModified": "2017-07-20T01:30:16.270",
"vulnStatus": "Modified",
"evaluatorSolution": "This vulnerability affects Joomla! versions 1.0.7 and previous.",
"descriptions": [
{
"lang": "en",
"value": "Joomla! 1.0.7 and earlier allows attackers to bypass intended access restrictions and gain certain privileges via certain attack vectors related to the (1) Weblink, (2) Polls, (3) Newsfeeds, (4) Weblinks, (5) Content, (6) Content Section, (7) Content Category, (8) Contact items, or (9) Contact Search, (10) Content Search, (11) Newsfeed Search, or (12) Weblink Search."
}
],
"metrics": {
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "9709F901-EDD2-4369-89F0-8AF3A63655E5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2E8E5942-AB17-45E8-B3D3-4DDD1DFA48D8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "89946AA1-0694-44A5-962E-ED36B4BFCE9C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "6024ABB5-0CB7-4874-8758-CC6FBF3073D7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "A41E39D9-ADD7-41A1-9E38-BD418B59E5E2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:*",
"matchCriteriaId": "05C21464-3FD4-4528-A512-7C0DE70E331C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:joomla:joomla:1.0.6:*:*:*:*:*:*:*",
"matchCriteriaId": "663EE640-2BE7-42FC-B848-7379C6DADA60"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:*",
"matchCriteriaId": "DAA2374C-E9D8-40E4-A4E5-E4F95E04E226"
}
]
}
]
}
],
"references": [
{
"url": "http://secunia.com/advisories/19105",
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
]
},
2023-04-24 12:24:31 +02:00
{
"url": "http://www.joomla.org/content/view/938/78/",
"source": "cve@mitre.org",
"tags": [
"Patch"
]
},
{
"url": "http://www.osvdb.org/23822",
"source": "cve@mitre.org"
},
2023-04-24 12:24:31 +02:00
{
"url": "http://www.vupen.com/english/advisories/2006/0818",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25033",
"source": "cve@mitre.org"
}
]
}