CVE-2017-20269

HOCH 8.2CVE-2017-20269 · Published 19/06/2026 · updated 21/08/2026

Kurz gesagt

CVE-2017-20269 ist eine Schwachstelle (HOCH (CVSS 8.2)) in kissgallery (terrywcarter).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.49%, höher als bei 42.6% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
kissgallery terrywcarter	`= 1.0.0`	No fix yet

Description

Joomla! Component KissGallery 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the component URL path. Attackers can supply malicious SQL code in the kissgallery endpoint to execute arbitrary database queries and extract sensitive information.

References

terrywcarter.com · Product
extensions.joomla.org/extensions/extension/photos-a-images/galleries/kissgallery · Product
exploit-db.com/exploits/42494 · Exploit
vulncheck.com/advisories/joomla-component-kissgallery-sql-injection · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free