Description

Joomla! before 1.0.11 omits some checks for whether _VALID_MOS is defined, which allows attackers to have an unknown impact, possibly resulting in PHP remote file inclusion.

Remediation

References

CVE-2006-4470

Related Vulnerabilities

phpMyFAQ Other Vulnerability (CVE-2004-2255)

Apache HTTP Server Other Vulnerability (CVE-1999-0926)

Mailman Other Vulnerability (CVE-2006-1712)

WordPress Plugin Post Thumbnail Editor Multiple Cross-Site Request Forgery Vulnerabilities (2.4.1)

Drupal Core 4.6.x Cross-Site Scripting (4.6.0 - 4.6.8)

Severity

High

Classification

CVE-2006-4470

Tags

Missing Update Known Vulnerabilities