Joomplace Vulnerabilities and Affected Products
Explore source-attributed vulnerabilities associated with Joomplace products.
Products
- Quiz Deluxe1 vulnerability
- Survey Force Deluxe1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2017-20257HIGH | Joomla! Component Quiz Deluxe 3.7.4 SQL InjectionJoomla! Component Quiz Deluxe 3.7.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands through the ajaxaction.flag_question task. Attackers can inject malicious SQL code via the stu_quiz_id or flag_quest parameters to manipulate database queries and extract sensitive information. CWE-89Jun 19, 2026 | CVSS8.8v4.0 | EPSS0.449% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-20256HIGH | Joomla Survey Force Deluxe 3.2.4 SQL Injection via invite ParameterJoomla Survey Force Deluxe 3.2.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the invite parameter. Attackers can send GET requests to the component with crafted SQL payloads in the invite parameter to extract sensitive database information. CWE-89Jun 19, 2026 | CVSS8.8v4.0 | EPSS0.449% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |