Skip to content
Threat Feed
Subscribe

Product

Quiz Deluxe 3.7.4

1 brief RSS
high advisory

CVE-2017-20257: Joomla! Component Quiz Deluxe SQL Injection

An unauthenticated SQL injection vulnerability (CVE-2017-20257) in Joomla! Component Quiz Deluxe 3.7.4 allows attackers to execute arbitrary SQL commands and extract sensitive information via the `ajaxaction.flag_question` task using `stu_quiz_id` or `flag_quest` parameters.

Quiz Deluxe 3.7.4 sql-injection web-application joomla cve data-exfiltration
2r 3t 1c