Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2009-4625
7.5
HIGHCVSS v2
Published
January 18, 2010
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
SQL injection vulnerability in the updateOnePage function in components/com_bfsurvey_pro/controller.php in BF Survey Pro Free (com_bfsurvey_profree) 1.2.4, and other versions before 1.2.6, a component for Joomla!, allows remote attackers to execute arbitrary SQL commands via the table parameter in an updateOnePage action to index.php.
Docker Hub