CVE-2010-3608

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) password (pw) parameters to (a) admin.php or (b) user.php.
Configurations

Configuration 1 (hide)

cpe:2.3:a:wire_plastic_design:wpquiz:2.7:*:*:*:*:*:*:*

History

21 Nov 2024, 01:19

Type Values Removed Values Added
References () http://packetstormsecurity.org/1009-exploits/wpquiz27-sql.txt - Exploit () http://packetstormsecurity.org/1009-exploits/wpquiz27-sql.txt - Exploit
References () http://www.exploit-db.com/exploits/15075 - Exploit () http://www.exploit-db.com/exploits/15075 - Exploit
References () http://www.securityfocus.com/bid/43384 - () http://www.securityfocus.com/bid/43384 -

Information

Published : 2010-09-24 21:00

Updated : 2024-11-21 01:19


NVD link : CVE-2010-3608

Mitre link : CVE-2010-3608

CVE.ORG link : CVE-2010-3608


JSON object : View

Products Affected

wire_plastic_design

  • wpquiz
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')