CVE:CVE-2010-2259
CNNVD:CNNVD-201006-116
Joomla!是一款开放源码的内容管理系统（CMS）。
Joomla!的组件BF Survey (com_bfsurvey)存在目录遍历漏洞。远程攻击者可以借助index.php的controller参数的".."符包含和执行任意的本地文件。
solution:Upgrade tamlyncreative com_bfsurvey_profree to a higher version than 1.2.6,and avoid the version 1.2.6; Upgrade tamlyncreative com_bfsurvey_pro to a higher version than 1.3.0,and avoid the version (,1.3.0]; Upgrade tamlyncreative com_bfsurvey_basic to a higher version than 1.1,and avoid the version (,1.1]