Joomla 'BF Quiz' Component 'catid' Parameter SQL Injection Vulnerability

This host is running Joomla! with BF Quiz component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlacomcombfquiztrialsqlinjvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Joomla 'BF Quiz' Component 'catid' Parameter SQL Injection Vulnerability Authors: Madhuri D...

CVE-2010-5032

Summary: CVE-2010-5032 is an SQL injection vulnerability in the Joomla! BF Quiz component (com_bfquiztrial) prior to version 1.3.1. The flaw allows remote attackers to inject SQL via the catid parameter of the bfquiztrial action to index.php, potentially compromising data via a crafted request. A...