Approved changes feed: RSS · Atom

cpe:2.3:a:joomplace:quiz_deluxe:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJoomplace (3720e65d-23f3-5169-86be-eeac438addc0)
ProductQuiz Deluxe (a7414cc2-ed5b-5557-b12c-d1b75ee8c631)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-20257 vulnerable 2026-07-28 18:56:21.330385 Joomla! Component Quiz Deluxe 3.7.4 SQL Injection
HIGH (8.2)
Joomla! Component Quiz Deluxe 3.7.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands through the ajaxaction.flag_question task. Attackers can inject malicious SQL code via the stu_quiz_id or flag_quest parameters to manipulate database queries and extract sensitive information.
Published: 2026-06-19T15:34:11.037Z
Updated: 2026-06-22T16:43:45.156Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.