{ "canonical_id": "joomla--CVE-2006-0114", "system_id": "joomla", "display_name": "Joomla", "category": "cms", "advisory_mode": "core", "title": "CVE-2006-0114", "summary": "The vCard functions in Joomla! 1.0.5 use predictable sequential IDs for vcards and do not restrict access to them, which allows remote attackers to obtain valid e-mail addresses to conduct spam attacks by modifying the contact_id parameter to index2.php.", "published_at": "2006-01-09T11:03:00.000", "updated_at": "2025-04-03T01:03:51.193", "severity": "medium", "cvss_score": 5.0, "exploit_status": "unknown", "source_confidence": "official", "official_source_url": "http://forge.joomla.org/sf/go/artf2950", "secondary_source_urls": [ "http://forum.joomla.org/index.php/topic%2C29031.0.html", "http://secunia.com/advisories/18361", "http://www.listerit.com/content/view/116/84/", "http://www.securityfocus.com/bid/16185", "http://www.vupen.com/english/advisories/2006/0097", "https://exchange.xforce.ibmcloud.com/vulnerabilities/24042" ], "aliases": [ "CVE-2006-0114" ], "cve_ids": [ "CVE-2006-0114" ], "ghsa_ids": [], "osv_ids": [], "affected_versions": [], "fixed_versions": [], "package_name": null, "render_markdown": false, "case_path": null, "secure_code_topics": [ "xss-output-encoding", "file-upload-validation", "path-traversal-guard", "plugin-extension-trust-policy" ], "status": "triage", "triage_reasons": [ "missing affected/fixed version details" ], "verification_status": "triage-manual", "verification_mode": "synthetic", "last_verified_at": null, "last_run_id": null, "evidence_bundle": null, "historical_status": null, "latest_status": null, "browser_evidence": { "required": false, "present": false, "refs": [] }, "repro_profile_id": "xss-generic", "artifact_mode": "official-image", "blocked_reason": null, "metadata": { "source_names": [ "NVD Joomla" ], "source_kinds": [ "nvd-search" ], "candidate_count": 1 } }