Joomla! before 1.0.11 does not limit access to the Admin Popups functionality, which has unknown impact and attack vectors.Referenceshttp://www.vupen.com/english/advisories/2006/3408http://www.joomla.org/content/view/1841/78/http://secunia.com/advisories/21666http://www.joomla.org/content/view/1843/74/
