2 matches found
CVE-2018-14502: Improper Neutralization of Special Elements used in an SQL Command
controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrary SQL commands via the 'answer' and 'answers' parameters...
9.8CVSS8.6AI score0.02686EPSS
SaveExploits2References2
PT-2020-8534
Name of the Vulnerable Software and Affected Versions: Kiboko Chained Quiz plugin versions prior to 1.0.9 Description: The issue allows remote unauthenticated users to execute arbitrary SQL commands via the answer and answers parameters in the controllers/quizzes.php file. This can be exploited b...
9.8CVSS0.02686EPSS
SaveExploits2References6
20