CVE-2006-1028: Joomla! Joomla

High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days.

feedcreator.class.php (aka the syndication component) in Joomla! 1.0.7 allows remote attackers to cause a denial of service (stressed file cache) by creating many files via filenames in the feed parameter to index.php.

Affected products

• Joomla! Joomla: version 1.0.7 only

Published 2006-03-07. Last modified 2026-06-16.