Joomla! Com Sef vulnerabilities

2 CVEs affecting Joomla! Com Sef, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-2681, published 2010-07-12.

More from Joomla!.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2010-2681, published 2010-07-12. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. PHP remote file inclusion vulnerability in the SEF404x (com_sef) component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig.absolute.path parameter to…
• CVE-2006-5040, published 2006-09-27. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in SEF404x (com_sef) for Joomla! has unspecified impact and attack vectors.