CVE-2010-2255

CVE-2010-2255 describes an SQL injection in Joomla! extensions BF Survey Pro (com_bfsurvey_pro) prior to 1.3.1, BF Survey Pro Free (com_bfsurvey_profree) prior to 1.2.6, and BF Survey Basic prior to 1.2, exploitable via the catid parameter to index.php. Public sources (including NVD and Red Hat) ...

CVE-2010-2255

SQL injection vulnerability in the BF Survey Pro combfsurveypro component before 1.3.1, BF Survey Pro Free combfsurveyprofree component 1.2.6, and BF Survey Basic component before 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php. NOTE:...