CVE detail
CVE-2009-3446 — CVE-2009-3446
Published 2009-09-28 · Modified 2026-06-16 · Vendor rick_estrada · Product com_mytube · Source nvd
UNKNOWN
severity
CVSS-derived band
0.0099
EPSS probability
exploitation probability, 30d
59.0%
EPSS percentile
percentile vs all CVEs
NOT LISTED
CISA KEV
known exploited catalog
Description
SQL injection vulnerability in the MyRemote Video Gallery (com_mytube) component 1.0 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter in a videos action to index.php.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References