Lucene search
PRIOn knowledge basePRION:CVE-2020-35951HistoryJan 01, 2021 - 4:15 a.m.
Buffer overflow
2021-01-0104:15:00
PRIOn knowledge base
www.prio-n.com
3
An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It allows users to delete arbitrary files such as wp-config.php file, which could effectively take a site offline and allow an attacker to reinstall with a WordPress instance under their control. This occurred via qsm_remove_file_fd_question, which allowed unauthenticated deletions (even though it was only intended for a person to delete their own quiz-answer files).
| CPE | Name | Operator | Version |
|---|---|---|---|
| quiz_and_survey_master | lt | 7.0.1 |
Related
cve
cve
CVE-2020-35951
2021-01-01 04:15:13
wpvulndb
wpvulndb
Quiz and Survey Master < 7.0.1 - Unauthenticated Arbitrary File Deletion
2020-08-13 00:00:00
wpexploit
wpexploit
Quiz and Survey Master < 7.0.1 - Unauthenticated Arbitrary File Deletion
2020-08-13 00:00:00
cvelist
cvelist
CVE-2020-35951
2021-01-01 03:27:03
nvd
nvd
CVE-2020-35951
2021-01-01 04:15:13
nuclei
nuclei
Wordpress Quiz and Survey Master <7.0.1 - Arbitrary File Deletion
2021-03-10 11:36:11
openvas
openvas
WordPress Quiz And Survey Master Plugin < 7.0.1 Multiple Vulnerabilities
2020-08-20 00:00:00