high7.5
CVE-2010-4404
SQL injection vulnerability in the Yannick Gaultier sh404SEF component before 2.1.8.777 for Joomla!
Impact
SQL injection vulnerability in the Yannick Gaultier sh404SEF component before 2.1.8.777 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Anything-Digital | Sh404sef | through 2.1.7.761 Versions 1.5.2.255, 1.5.3.296, 1.5.4.302, 1.5.5.388, 1.5.6.398 |
Weakness classification
References
- NVD record
- CVE.org record
- http://dev.anything-digital.com/Forum/Announcements/9100-Urgent-sh404SEF-security-release-Joomla-1.5/
- http://secunia.com/advisories/42430
- http://twitter.com/jeffchannell/status/8603529560195072
- http://www.securityfocus.com/bid/45135
- http://dev.anything-digital.com/Forum/Announcements/9100-Urgent-sh404SEF-security-release-Joomla-1.5/
- http://secunia.com/advisories/42430
- http://twitter.com/jeffchannell/status/8603529560195072
- http://www.securityfocus.com/bid/45135