Exploitation Summary
EIP tracks 2 public exploits for CVE-2010-5032. PoCs published by Valentin Hoebel, Valentin.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in the Joomla BF Quiz component (CVE-2010-5032). It extracts database information and administrator password hashes via crafted UNION-based SQL injection strings.
Description
SQL injection vulnerability in the BF Quiz (com_bfquiztrial) component before 1.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a bfquiztrial action to index.php.
Exploits (2)
This exploit targets a SQL injection vulnerability in the Joomla BF Quiz component (CVE-2010-5032). It extracts database information and administrator password hashes via crafted UNION-based SQL injection strings.
This is a writeup describing a SQL injection vulnerability in the Joomla BF Quiz component version 1.3.0. It provides an example URI for exploitation but does not include functional exploit code.