3 matches found
CVE-2013-4501
The default views in the Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote attackers to obtain sensitive quiz results via unspecified vectors...
CVE-2013-4501
The CVE-2013-4501 entry concerns the Drupal Quiz module (6.x-4.x) prior to 6.x-4.5. The root cause is improper access control in the quiz results views, allowing remote attackers to obtain sensitive quiz results via unspecified vectors. Affected software is the Quiz module for Drupal 6.x, version...
SA-CONTRIB-2013-083 - Quiz - Access Bypass
Access bypass on deleting quiz results The Quiz module provides tools for authoring and administering quizzes through Drupal. A quiz is given as a series of questions, with only one question appearing per page. Scores are then stored in the database. The module doesn't sufficiently check the dele...