CVE-2017-20276: Joomla! Component SIMGenealogy 2.1.5 SQL Injection

Published Jun 19, 2026

Updated

Joomla! Component SIMGenealogy 2.1.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the type parameter. Attackers can send GET requests to index.php with the option=comsimgenealogy, view=latest parameters and inject malicious SQL in the type parameter to extract sensitive database information.

Affected Software

2 affected components

Joomla SIMGenealogy=2.1.5

Simbunch Simgenealogy Joomla\!=2.1.5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove Joomla! Component SIMGenealogy 2.1.5 from your environment.
Uninstall the SIMGenealogy component from the Joomla installation if it is not required.
Configuration
Unpublish or disable the com_simgenealogy component in the Joomla administrator interface to prevent access to its front-end entry points (e.g., index.php?option=com_simgenealogy&view=latest).
Joomla! com_simgenealogy published/enabled = disabled/unpublished
Compensating control
Deploy a Web Application Firewall or implement HTTP request filtering to block or sanitize requests to index.php where option=com_simgenealogy and view=latest, and to block suspicious or unexpected values in the 'type' parameter.
Operational
Review web and database logs for GET requests matching index.php?option=com_simgenealogy&view=latest and signs of SQL injection or data extraction. If compromise or data exposure is suspected, rotate database credentials and restore affected data from known-good backups.

Event History

Jun 19, 2026

CVE Published

via MITRE·04:38 PM

Data Sourced

via MITRE·04:38 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-20276?

The severity of CVE-2017-20276 is rated high with a score of 8.2.

How do I fix CVE-2017-20276?

To fix CVE-2017-20276, update the Joomla! Component SIMGenealogy to the latest version available from the developer.

What type of vulnerability is CVE-2017-20276?

CVE-2017-20276 is an SQL injection vulnerability.

Who is affected by CVE-2017-20276?

CVE-2017-20276 affects users of the Joomla! Component SIMGenealogy version 2.1.5.

Can attackers exploit CVE-2017-20276 remotely?

Yes, unauthenticated attackers can exploit CVE-2017-20276 remotely by sending crafted GET requests.