cve/2010/CVE-2010-5032.md

CVE-2010-5032

Description

SQL injection vulnerability in the BF Quiz (com_bfquiztrial) component before 1.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a bfquiztrial action to index.php.

POC

Reference

• http://packetstormsecurity.org/1005-exploits/joomla_com_bfquiz_sploit.py.txt
• http://www.packetstormsecurity.org/1005-exploits/joomlabfquiz-sql.txt

Github

No PoCs found on GitHub currently.