Joomplace

joomplace

3 CVEs • 3 products

Products (3)

Click to collapse

Toggle

Com Joomportfolio

com_joomportfolio

Survey Force Deluxe

survey_force_deluxe

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-20257 1Joomplace 1Quiz Deluxe Aug 19, 2026 Jun 19, 2026 8.8 HIGH· v4 8.2 HIGH· v3 N/A· v2 Joomla! Component Quiz Deluxe 3.7.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands through the ajaxaction.flag_question task. Attackers can inject maliciou...Show more Joomla! Component Quiz Deluxe 3.7.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands through the ajaxaction.flag_question task. Attackers can inject malicious SQL code via the stu_quiz_id or flag_quest parameters to manipulate database queries and extract sensitive information.Show less
CVE-2017-20256 1Joomplace 1Survey Force Deluxe Aug 19, 2026 Jun 19, 2026 8.8 HIGH· v4 8.2 HIGH· v3 N/A· v2 Joomla Survey Force Deluxe 3.2.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the invite parameter. Attackers can send...Show more Joomla Survey Force Deluxe 3.2.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the invite parameter. Attackers can send GET requests to the component with crafted SQL payloads in the invite parameter to extract sensitive database information.Show less
CVE-2009-4428 1Joomplace 1Com Joomportfolio Apr 23, 2026 Dec 28, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the JoomPortfolio (com_joomportfolio) component 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the secid parameter in a showcat action to index.php.