What’s Vulnerable › Vulnerabilities

CVE-2006-7010

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-02-12 · updated 2026-06-16

Description

The mosgetparam implementation in Joomla! before 1.0.10, does not set a variable's data type to integer when the variable's default value is numeric, which has unspecified impact and attack vectors, which may permit SQL injection attacks.

Affected products

• Joomla! Joomla: 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5 (+4)

References

• http://secunia.com/advisories/20874
• http://www.joomla.org/content/view/1510/74/
• http://www.osvdb.org/26916
• http://secunia.com/advisories/20874
• http://www.joomla.org/content/view/1510/74/
• http://www.osvdb.org/26916

Get alerted when CVE-2006-7010 or the next vulnerability affects your stack