CVE-2006-4470

HIGH 7.5CVE-2006-4470 · Published 31/08/2006 · updated 16/06/2026

In short

CVE-2006-4470 is a HIGH (CVSS 7.5) vulnerability affecting joomla! (joomla).
Chance of exploitation in the next 30 days (EPSS): 3.4%, higher than 88.8% of all vulnerabilities.
Fix: update to 1.0.11 or later.

Package	Affected versions	Patched versions
joomla! joomla	`< 1.0.11`	`1.0.11`

Description

Joomla! before 1.0.11 omits some checks for whether _VALID_MOS is defined, which allows attackers to have an unknown impact, possibly resulting in PHP remote file inclusion.

References

secunia.com/advisories/21666 · Third Party Advisory
joomla.org/content/view/1841/78 · Vendor Advisory
joomla.org/content/view/1843/74 · Vendor Advisory
vupen.com/english/advisories/2006/3408 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/28631 · Third Party Advisory

More vulnerabilities in joomla!

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free