CVE-2006-1029

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-07 · updated 2026-06-16

Description

The cross-site scripting (XSS) countermeasures in class.inputfilter.php in Joomla! 1.0.7 allow remote attackers to cause a denial of service via a crafted mosmsg parameter to index.php with a malformed sequence of multiple tags, as demonstrated using "<<>AAA<><>", possibly due to nested or empty tags.

Affected products

Joomla! Joomla: 1.0.7

References

http://www.joomla.org/content/view/938/78/
http://www.osvdb.org/23816
http://www.securityfocus.com/archive/1/426538/100/0/threaded
http://www.joomla.org/content/view/938/78/
http://www.osvdb.org/23816
http://www.securityfocus.com/archive/1/426538/100/0/threaded

Get alerted when CVE-2006-1029 or the next vulnerability affects your stack