CVE-2017-20269 - CVE House
Back to Database
Status published High CVE-2017-20269

Joomla! Component KissGallery 1.0.0 SQL Injection

Vulnerability Description

Joomla! Component KissGallery 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the component URL path. Attackers can supply malicious SQL code in the kissgallery endpoint to execute arbitrary database queries and extract sensitive information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-20269

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Ihsan Sencan

Affected Vendor

Terrywcarter

View all reports →

Affected Software

KissGallery
Vulnerable Versions:
1.0.0

Timeline

Official Publish: June 19th, 2026
Last Modified: June 22nd, 2026
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Weaknesses (CWE)