VULNERABILITY INTELLIGENCE

CVE-2010-1477

CVSS score7.5 HIGH

EPSS probability1.22%

CISA KEVNot currently listed

Published2010-04-19

Last modified2026-06-16

Description

SQL injection vulnerability in the SermonSpeaker (com_sermonspeaker) component before 3.2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a latest_sermons action to index.php.