CVE-2010-2255
Tamlyncreative Com Bfsurvey Profree < 1.3.0 - SQL Injection
Title source: ruleDescription
SQL injection vulnerability in the BF Survey Pro (com_bfsurvey_pro) component before 1.3.1, BF Survey Pro Free (com_bfsurvey_profree) component 1.2.6, and BF Survey Basic component before 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php. NOTE: some of these details are obtained from third party information.
Exploits (1)
References (5)
Core 5
Core References
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/37585
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/61456
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/37868
Exploit x_refsource_misc
http://packetstormsecurity.org/1001-exploits/joomlabfsurveypro-sql.txt
Exploit x_refsource_confirm
http://www.tamlyncreative.com.au/software/forum/index.php?topic=641.0
Scores
EPSS
0.0049
EPSS Percentile
65.6%
Details
CWE
CWE-89
Status
published
Products (3)
tamlyncreative/com_bfsurvey_basic
< 1.1
tamlyncreative/com_bfsurvey_pro
< 1.3.0
tamlyncreative/com_bfsurvey_profree
1.2.6
Published
Jun 09, 2010
Tracked Since
Feb 18, 2026