Executive Summary

Name CVE-2005-4650 First vendor Publication 2005-12-31
Vendor Cve Last vendor Modification 2008-09-05

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score 5 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores


Joomla! 1.03 does not restrict the number of "Search" Mambots, which allows remote attackers to cause a denial of service (resource consumption) via a large number of Search Mambots.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4650

CAPEC : Common Attack Pattern Enumeration & Classification

Id Name
CAPEC-82 Violating Implicit Assumptions Regarding XML Content (aka XML Denial of Servi...
CAPEC-99 XML Parser Attack
CAPEC-119 Resource Depletion
CAPEC-121 Locate and Exploit Test APIs
CAPEC-125 Resource Depletion through Flooding
CAPEC-130 Resource Depletion through Allocation
CAPEC-147 XML Ping of Death
CAPEC-197 XEE (XML Entity Expansion)
CAPEC-227 Denial of Service through Resource Depletion
CAPEC-228 Resource Depletion through DTD Injection in a SOAP Message
CAPEC-229 XML Attribute Blowup

CWE : Common Weakness Enumeration

% Id Name

CPE : Common Platform Enumeration

Application 1

Open Source Vulnerability Database (OSVDB)

Id Description
21041 Joomla! Search Mambots Query Saturation DoS

Joomla! contains a flaw that may allow a remote denial of service. The issue is triggered when an attacker requests an unusually high search number to 'Search Mambots' which causes a search flood to occur, and will result in loss of availability for the service.

Sources (Detail)

Source Url
CONFIRM http://www.joomla.org/content/view/499/66/
OSVDB http://www.osvdb.org/21041
SECUNIA http://secunia.com/advisories/17675

Alert History

If you want to see full details history, please login or register.
Date Informations
2020-05-23 00:17:12
  • Multiple Updates
2016-06-28 15:31:53
  • Multiple Updates
2016-04-26 14:08:00
  • Multiple Updates
2013-05-11 11:38:35
  • Multiple Updates