CVE-2017-20271

Name of the Vulnerable Software and Affected Versions Joomla StreetGuessr Game version 1.1.8

Description An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries. This is achieved by sending GET requests to the 'index.php' endpoint with the parameters option=com streetguess and view=maps, and injecting malicious code into the catid parameter. This can lead to the extraction of sensitive database information, such as database names and the version.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.