CVE-2010-5032 | BDVDB-2026-48092 Detail
Description#
SQL injection vulnerability in the BF Quiz (com_bfquiztrial) component before 1.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a bfquiztrial action to index.php.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://xenuser.org/documents/security/joomla_com_bfquiz_sqli.txt
- http://secunia.com/advisories/39960
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58979
- http://packetstormsecurity.org/1005-exploits/joomla_com_bfquiz_sploit.py.txt
- http://www.packetstormsecurity.org/1005-exploits/joomlabfquiz-sql.txt
- http://www.tamlyncreative.com.au/software/forum/index.php?topic=729.0
- http://www.vupen.com/english/advisories/2010/1272
- http://osvdb.org/65001
- http://www.securityfocus.com/bid/40435
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.