CVE-2017-20270: Joomla! Component Twitch Tv 1.1 SQL Injection

Published Jun 19, 2026

Updated

Joomla! Component Twitch Tv 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the username and id parameters. Attackers can send GET requests to index.php with option=comtwitchtv and view parameters containing SQL injection payloads to extract sensitive database information including credentials and configuration data.

Affected Software

2 affected components

Joomla! Joomla Component Twitch Tv (com_twitchtv)=1.1

Raindropsinfotech Twitch Tv Joomla\!=1.1

Event History

Jun 19, 2026

CVE Published

via MITRE·04:17 PM

Data Sourced

via MITRE·04:17 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-20270?

CVE-2017-20270 has a high severity score of 8.8.

How do I fix CVE-2017-20270?

To fix CVE-2017-20270, update the Joomla! Component Twitch Tv to a version that addresses the SQL injection vulnerability.

What type of vulnerability is CVE-2017-20270?

CVE-2017-20270 is an SQL injection vulnerability.

Can CVE-2017-20270 be exploited by unauthenticated users?

Yes, CVE-2017-20270 can be exploited by unauthenticated attackers.

Which parameters are affected by CVE-2017-20270?

CVE-2017-20270 affects the username and id parameters in requests to the Joomla! Component Twitch Tv.