Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/10 12:00 a.m.•10 views

CVE-2018-14502: Improper Neutralization of Special Elements used in an SQL Command

controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrary SQL commands via the 'answer' and 'answers' parameters...

9.8CVSS8.6AI score0.02686EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2020/03/10 12:00 a.m.•6 views

PT-2020-8534

Name of the Vulnerable Software and Affected Versions: Kiboko Chained Quiz plugin versions prior to 1.0.9 Description: The issue allows remote unauthenticated users to execute arbitrary SQL commands via the answer and answers parameters in the controllers/quizzes.php file. This can be exploited b...

9.8CVSS0.02686EPSS
SaveExploits2References6
Rows per page
Query Builder