high7.5
CVE-2006-7010
The mosgetparam implementation in Joomla!
Impact
The mosgetparam implementation in Joomla! before 1.0.10, does not set a variable's data type to integer when the variable's default value is numeric, which has unspecified impact and attack vectors, which may permit SQL injection attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla | Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5 |