Lucene search

K
cve[email protected]CVE-2007-6172
HistoryNov 30, 2007 - 12:46 a.m.

CVE-2007-6172

2007-11-3000:46:00
CWE-89
web.nvd.nist.gov
29
security
sql injection
wpquiz 2.7
vulnerability
nvd

8.6 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

38.8%

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewimage.php and (2) comments.php.

Affected configurations

NVD
Node
wire_plastic_designwpquizMatch2.7

8.6 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

38.8%

Related for CVE-2007-6172