high7.5Public exploit code
CVE-2009-3446
SQL injection vulnerability in the MyRemote Video Gallery (com_mytube) component 1.0 Beta for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component com_mytube (user_id) 1.0 Beta - Blind SQL Injection2009-09-21 · webapps · multiple · Verified
Impact
SQL injection vulnerability in the MyRemote Video Gallery (com_mytube) component 1.0 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter in a videos action to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rick Estrada | Com Mytube | Version 1.0_beta |