CVE-2017-20269

ALTO 8.2CVE-2017-20269 · Published 19/06/2026 · updated 21/08/2026

In breve

CVE-2017-20269 è una vulnerabilità ALTO (CVSS 8.2) che riguarda kissgallery (terrywcarter).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.49%, superiore al 42.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
kissgallery terrywcarter	`= 1.0.0`	No fix yet

Description

Joomla! Component KissGallery 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the component URL path. Attackers can supply malicious SQL code in the kissgallery endpoint to execute arbitrary database queries and extract sensitive information.

References

terrywcarter.com · Product
extensions.joomla.org/extensions/extension/photos-a-images/galleries/kissgallery · Product
exploit-db.com/exploits/42494 · Exploit
vulncheck.com/advisories/joomla-component-kissgallery-sql-injection · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free