CVE-2006-4468

Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to unvalidated input, allow attackers to have an unknown impact via unspecified vectors involving the (1) mosMail, (2) JosIsValidEmail, and (3) josSpoofValue functions; (4) the lack of inclusion of globals.php in administrator/index.php; (5) the Admin User Manager; and (6) the poll module.

• CWE-20

• http://secunia.com/advisories/21666Vendor Advisory
• http://www.joomla.org/content/view/1841/78/Vendor Advisory
• http://www.joomla.org/content/view/1843/74/Vendor Advisory
• http://www.vupen.com/english/advisories/2006/3408Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28628Third Party Advisory, VDB Entry
• http://secunia.com/advisories/21666Vendor Advisory
• http://www.joomla.org/content/view/1841/78/Vendor Advisory
• http://www.joomla.org/content/view/1843/74/Vendor Advisory
• http://www.vupen.com/english/advisories/2006/3408Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28628Third Party Advisory, VDB Entry

Published

Aug 31, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4462Gonafish.com LinksCaffe 2.0 and 3.0 do not properly restrict…
• CVE-2006-4463SQL injection vulnerability in the administrator control pan…
• CVE-2006-4464The Nokia Browser, possibly Nokia Symbian 60 Browser 3rd edi…
• CVE-2006-4465Microsoft Terminal Server, when running an application sessi…
• CVE-2006-4466Joomla! before 1.0.11 does not properly unset variables when…
• CVE-2006-4467Simple Machines Forum (SMF) 1.1RCx before 1.1RC3, and 1.0.x …
• CVE-2006-4469Unspecified vulnerability in PEAR.php in Joomla! before 1.0.…
• CVE-2006-4470Joomla! before 1.0.11 omits some checks for whether _VALID_M…
• CVE-2006-4471The Admin Upload Image functionality in Joomla! before 1.0.1…
• CVE-2006-4472Multiple unspecified vulnerabilities in Joomla! before 1.0.1…
• CVE-2006-4473Unspecified vulnerability in com_content in Joomla! before 1…
• CVE-2006-4474Multiple cross-site scripting (XSS) vulnerabilities in Jooml…