CVE-2010-2255: SQL Injection
SQL injection vulnerability in the BF Survey Pro (combfsurveypro) component before 1.3.1, BF Survey Pro Free (combfsurveyprofree) component 1.2.6, and BF Survey Basic component before 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php. NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2255?
CVE-2010-2255 has a medium severity rating due to its potential to allow remote SQL injection attacks.
How do I fix CVE-2010-2255?
To fix CVE-2010-2255, upgrade to BF Survey Pro version 1.3.1 or later, and BF Survey Pro Free version 1.2.6 or later.
What components are affected by CVE-2010-2255?
CVE-2010-2255 affects the BF Survey Pro, BF Survey Pro Free, and BF Survey Basic components for Joomla! versions prior to specified secure releases.
Can CVE-2010-2255 allow for data breaches?
Yes, CVE-2010-2255 could enable attackers to execute arbitrary SQL commands, potentially leading to data breaches.
What are the potential impacts of CVE-2010-2255?
The impacts of CVE-2010-2255 include unauthorized access to database information, data manipulation, and possible complete control over the affected application.