The Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote authenticated users with the “view any quiz results” or “view results for own quiz” permission to delete arbitrary results via the delete option.
CPE | Name | Operator | Version |
---|---|---|---|
quiz | eq | 6.x-4.0 alpha5 | |
quiz | eq | 6.120.42 | |
quiz | eq | 6.x-4.0 alpha2 | |
quiz | eq | 6.x-4.0 rc8 | |
quiz | eq | 6.x-4.0 rc10 | |
quiz | eq | 6.x-4.0 rc2 | |
quiz | eq | 6.x-4.0 beta1 | |
quiz | eq | 6.x-4.0 beta4 | |
quiz | eq | 6.x-4.0 rc5 | |
quiz | eq | 6.120.44 |