CVE-2006-0114

State: Published
Severity: Not scored
Published: Jan 9, 2006
Updated: Aug 7, 2024
Reserved: Jan 9, 2006

Description

The vCard functions in Joomla! 1.0.5 use predictable sequential IDs for vcards and do not restrict access to them, which allows remote attackers to obtain valid e-mail addresses to conduct spam attacks by modifying the contact_id parameter to index2.php.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

18361third-party-advisory
16185vdb-entry
http://forge.joomla.org/sf/go/artf2950
ADV-2006-0097vdb-entry
http://www.listerit.com/content/view/116/84/
http://forum.joomla.org/index.php/topic%2C29031.0.html
joomla-vcard-information-disclosure(24042)vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.