3 matches found
PT-2025-11332
Name of the Vulnerable Software and Affected Versions: Tripetto plugin for WordPress versions up to, and including, 8.0.9 Description: The issue is related to Cross-Site Request Forgery due to missing nonce validation. This allows unauthenticated attackers to delete arbitrary results via a forged...
CVE-2013-4500
The Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote authenticated users with the "view any quiz results" or "view results for own quiz" permission to delete arbitrary results via the delete option...
PT-2014-2808
Name of the Vulnerable Software and Affected Versions Quiz module versions 6.x-4.x before 6.x-4.5 Description The issue allows remote authenticated users with the view any quiz results or view results for own quiz permission to delete arbitrary results. Recommendations For versions prior to...