Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-4405

Cross-site scripting (XSS) vulnerability in the Yannick Gaultier sh404SEF component before 2.1.8.777 for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published

2010-12-06T13:37:32.317

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application anything-digital sh404sef ≤ 2.1.7.761 Yes
Application anything-digital sh404sef 1.5.2.255 Yes
Application anything-digital sh404sef 1.5.3.296 Yes
Application anything-digital sh404sef 1.5.4.302 Yes
Application anything-digital sh404sef 1.5.5.388 Yes
Application anything-digital sh404sef 1.5.6.398 Yes
Application anything-digital sh404sef 1.5.7.407 Yes
Application anything-digital sh404sef 1.5.8.432 Yes
Application anything-digital sh404sef 1.5.9.434 Yes
Application anything-digital sh404sef 1.5.10.446 Yes
Application anything-digital sh404sef 1.5.11.459 Yes
Application anything-digital sh404sef 1.5.12.464 Yes
Application anything-digital sh404sef 2.0.0 Yes
Application anything-digital sh404sef 2.0.1.531 Yes
Application anything-digital sh404sef 2.0.2.542 Yes
Application anything-digital sh404sef 2.0.3.545 Yes
Application anything-digital sh404sef 2.1.0.641 Yes
Application anything-digital sh404sef 2.1.1.644 Yes
Application anything-digital sh404sef 2.1.2.649 Yes
Application anything-digital sh404sef 2.1.3.680 Yes
Application anything-digital sh404sef 2.1.4.734 Yes
Application anything-digital sh404sef 2.1.5.746 Yes
Application anything-digital sh404sef 2.1.6.749 Yes
Application joomla joomla\! * No
References