← Database

CVE-2006-4471

MEDIUM CVSS: 6.5 Published: 2006-08-31 Modified: 2026-06-16

Description

The Admin Upload Image functionality in Joomla! before 1.0.11 allows remote authenticated users to upload files outside of the /images/stories/ directory via unspecified vectors.

Affected Platforms

Joomla Joomla\!

Weakness Type

CWE-434

References