CVE:CVE-2010-2255
CNNVD:CNNVD-201006-112
Joomla!是一套使用在Joomla!内容管理系统中的论坛组件。
Joomla!的BF Survey Basic、BF Survey Pro Free (com_bfsurvey_profree)、BF Survey Pro (com_bfsurvey_pro)多个组件存在SQL注入漏洞。远程攻击者可以借助脚本index.php的catid参数执行任意的SQL命令。
solution:Upgrade tamlyncreative com_bfsurvey_profree to a higher version than 1.2.6,and avoid the version 1.2.6; Upgrade tamlyncreative com_bfsurvey_pro to a higher version than 1.3.0,and avoid the version (,1.3.0]; Upgrade tamlyncreative com_bfsurvey_basic to a higher version than 1.1,and avoid the version (,1.1]