CVE-2006-4471: Joomla!

Medium severity, CVSS 6.5. EPSS: 2.4% chance of exploitation in the next 30 days.

The Admin Upload Image functionality in Joomla! before 1.0.11 allows remote authenticated users to upload files outside of the /images/stories/ directory via unspecified vectors.

Affected products

• Joomla! Joomla!: before 1.0.11 (fixed in 1.0.11)

Published 2006-08-31. Last modified 2026-06-16.