VulnerabilityModified

CVE-2010-5032

SQL injection vulnerability in the BF Quiz (com_bfquiztrial) component before 1.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a bfquiztrial action to index.php.

HIGH 7.5EPSS 1.73%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.73%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 1.73% probability · 76th percentile
CISA KEV: Not listed
Weakness: CWE-89
Affected: tamlyncreative/com bfquiztrial
Source: cve@mitre.org

References

http://osvdb.org/65001Exploit
http://packetstormsecurity.org/1005-exploits/joomla_com_bfquiz_sploit.py.txtExploit
http://secunia.com/advisories/39960Vendor Advisory
http://www.packetstormsecurity.org/1005-exploits/joomlabfquiz-sql.txtExploit
http://www.securityfocus.com/bid/40435Exploit
http://www.tamlyncreative.com.au/software/forum/index.php?topic=729.0Patch
http://www.vupen.com/english/advisories/2010/1272Vendor Advisory
http://xenuser.org/documents/security/joomla_com_bfquiz_sqli.txtExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/58979
http://osvdb.org/65001Exploit
http://packetstormsecurity.org/1005-exploits/joomla_com_bfquiz_sploit.py.txtExploit
http://secunia.com/advisories/39960Vendor Advisory
http://www.packetstormsecurity.org/1005-exploits/joomlabfquiz-sql.txtExploit
http://www.securityfocus.com/bid/40435Exploit
http://www.tamlyncreative.com.au/software/forum/index.php?topic=729.0Patch
http://www.vupen.com/english/advisories/2010/1272Vendor Advisory
http://xenuser.org/documents/security/joomla_com_bfquiz_sqli.txtExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/58979

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.