← Database

CVE-2009-4625

HIGH CVSS: 7.5 Published: 2010-01-18 Modified: 2026-06-16

Description

SQL injection vulnerability in the updateOnePage function in components/com_bfsurvey_pro/controller.php in BF Survey Pro Free (com_bfsurvey_profree) 1.2.4, and other versions before 1.2.6, a component for Joomla!, allows remote attackers to execute arbitrary SQL commands via the table parameter in an updateOnePage action to index.php.

Affected Platforms

Tamlyncreative Com Bfsurvey ProfreeJoomla Joomla\!

Weakness Type

CWE-89

References