CVE-2017-20256

HOCH 8.2CVE-2017-20256 · Published 19/06/2026 · updated 19/08/2026

Kurz gesagt

CVE-2017-20256 ist eine Schwachstelle (HOCH (CVSS 8.2)) in survey force deluxe (joomplace).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.49%, höher als bei 42.5% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
survey force deluxe joomplace	`= 3.2.4`	No fix yet

Description

Joomla Survey Force Deluxe 3.2.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the invite parameter. Attackers can send GET requests to the component with crafted SQL payloads in the invite parameter to extract sensitive database information.

References

joomplace.com · Product
extensions.joomla.org/extensions/extension/contacts-and-feedback/surveys/survey-force-deluxe · Product
exploit-db.com/exploits/42606 · Exploit
vulncheck.com/advisories/joomla-survey-force-deluxe-sql-injection-via-invite-parameter · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free