4.3

CVE-2010-4405

Cross-site scripting (XSS) vulnerability in the Yannick Gaultier sh404SEF component before 2.1.8.777 for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Anything-digital ≫ Sh404sef Version <= 2.1.7.761
Anything-digital ≫ Sh404sef Version 1.5.2.255
Anything-digital ≫ Sh404sef Version 1.5.3.296
Anything-digital ≫ Sh404sef Version 1.5.4.302
Anything-digital ≫ Sh404sef Version 1.5.5.388
Anything-digital ≫ Sh404sef Version 1.5.6.398
Anything-digital ≫ Sh404sef Version 1.5.7.407
Anything-digital ≫ Sh404sef Version 1.5.8.432
Anything-digital ≫ Sh404sef Version 1.5.9.434
Anything-digital ≫ Sh404sef Version 1.5.10.446
Anything-digital ≫ Sh404sef Version 1.5.11.459
Anything-digital ≫ Sh404sef Version 1.5.12.464
Anything-digital ≫ Sh404sef Version 2.0.0 Update rc522
Anything-digital ≫ Sh404sef Version 2.0.1.531
Anything-digital ≫ Sh404sef Version 2.0.2.542
Anything-digital ≫ Sh404sef Version 2.0.3.545
Anything-digital ≫ Sh404sef Version 2.1.0.641
Anything-digital ≫ Sh404sef Version 2.1.1.644
Anything-digital ≫ Sh404sef Version 2.1.2.649
Anything-digital ≫ Sh404sef Version 2.1.3.680
Anything-digital ≫ Sh404sef Version 2.1.4.734
Anything-digital ≫ Sh404sef Version 2.1.5.746
Anything-digital ≫ Sh404sef Version 2.1.6.749
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.05% 0.599
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://dev.anything-digital.com/Forum/Announcements/9100-Urgent-sh404SEF-security-release-Joomla-1.5/
http://secunia.com/advisories/42430
Vendor Advisory
http://twitter.com/jeffchannell/status/8603529560195072
http://www.securityfocus.com/bid/45135