Description
SQL injection vulnerability in the Yannick Gaultier sh404SEF component before 2.1.8.777 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References (4)
Core 4
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/42430
Various Sources x_refsource_misc
http://twitter.com/jeffchannell/status/8603529560195072
Various Sources x_refsource_confirm
http://dev.anything-digital.com/Forum/Announcements/9100-Urgent-sh404SEF-security-release-Joomla-1.5/
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/45135
Scores
EPSS
0.0108
EPSS Percentile
61.8%
Details
CWE
CWE-89
Status
published
Products (23)
anything-digital/sh404sef
1.5.2.255
anything-digital/sh404sef
1.5.3.296
anything-digital/sh404sef
1.5.4.302
anything-digital/sh404sef
1.5.5.388
anything-digital/sh404sef
1.5.6.398
anything-digital/sh404sef
1.5.7.407
anything-digital/sh404sef
1.5.8.432
anything-digital/sh404sef
1.5.9.434
anything-digital/sh404sef
1.5.10.446
anything-digital/sh404sef
1.5.11.459
... and 13 more
Published
Dec 06, 2010
Tracked Since
Feb 18, 2026