Vulnerabilities > CVE-2006-7010 - SQL-Injection vulnerability in Joomla
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
The mosgetparam implementation in Joomla! before 1.0.10, does not set a variable's data type to integer when the variable's default value is numeric, which has unspecified impact and attack vectors, which may permit SQL injection attacks.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 10 |