Vulnerability Details CVE-2017-20257
Joomla! Component Quiz Deluxe 3.7.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands through the ajaxaction.flag_question task. Attackers can inject malicious SQL code via the stu_quiz_id or flag_quest parameters to manipulate database queries and extract sensitive information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 40.9%
CVSS Severity
CVSS v3 Score 8.2
References
Products affected by CVE-2017-20257
-
cpe:2.3:a:joomplace:quiz_deluxe:3.7.4