VULNERABILITY INTELLIGENCE

CVE-2006-7010

CVSS score7.5 HIGH
EPSS probability0.92%
CISA KEVNot currently listed
Published2007-02-12
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The mosgetparam implementation in Joomla! before 1.0.10, does not set a variable's data type to integer when the variable's default value is numeric, which has unspecified impact and attack vectors, which may permit SQL injection attacks.

Primary references