CVE-2006-3481

critical

Description

Multiple SQL injection vulnerabilities in Joomla! before 1.0.10 allow remote attackers to execute arbitrary SQL commands via unspecified parameters involving the (1) "Remember Me" function, (2) "Related Items" module, and the (3) "Weblinks submission".

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/27520

http://www.vupen.com/english/advisories/2006/2608

http://www.securityfocus.com/bid/18742

http://www.osvdb.org/26912

http://www.osvdb.org/26911

http://www.osvdb.org/26910

http://www.joomla.org/content/view/1511/78/

http://www.joomla.org/content/view/1510/74/

http://secunia.com/advisories/20874

Details

Source: Mitre, NVD

Published: 2006-07-10

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00044