CVE-2017-20257

ALTO 8.2CVE-2017-20257 · Published 19/06/2026 · updated 19/08/2026

In breve

CVE-2017-20257 è una vulnerabilità ALTO (CVSS 8.2) che riguarda quiz deluxe (joomplace).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.49%, superiore al 42.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
quiz deluxe joomplace	`= 3.7.4`	No fix yet

Description

Joomla! Component Quiz Deluxe 3.7.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands through the ajaxaction.flag_question task. Attackers can inject malicious SQL code via the stu_quiz_id or flag_quest parameters to manipulate database queries and extract sensitive information.

References

joomplace.com · Product
extensions.joomla.org/extensions/extension/living/education-a-culture/quiz-deluxe · Product
exploit-db.com/exploits/42589 · Exploit
vulncheck.com/advisories/joomla-component-quiz-deluxe-sql-injection · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free