CVE-2006-0114: Joomla! Joomla

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

The vCard functions in Joomla! 1.0.5 use predictable sequential IDs for vcards and do not restrict access to them, which allows remote attackers to obtain valid e-mail addresses to conduct spam attacks by modifying the contact_id parameter to index2.php.

Affected products

Published 2006-01-09. Last modified 2026-06-16.