6 matches found
CVE-2019-17599
The quiz-master-next aka Quiz And Survey Master plugin before 6.3.5 for WordPress is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter and/or the quizid parameter. The component is:...
CVE-2019-17599: Improper Neutralization of Input During Web Page Generation
The quiz-master-next aka Quiz And Survey Master plugin before 6.3.5 for WordPress is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter and/or the quizid parameter. The component is:...
CVE-2019-9575
The Quiz And Survey Master plugin 6.0.4 for WordPress allows wp-admin/admin.php?page=mlwquizresults quizid XSS...
CVE-2019-9575: Improper Neutralization of Input During Web Page Generation
The Quiz And Survey Master plugin 6.0.4 for WordPress allows wp-admin/admin.php?page=mlwquizresults quizid XSS...
CVE-2006-4978: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the univers parameter in score.php and 2 the quizid parameter in home.php, accessed through the front/ URI...
phpQuiz 0.1.2 - SQL Injection / Code Execution
Title: PHPQuiz Download File phpquiz/imgquiz/ folder is by defaut writable so after uploading a simple phpshell we can lanche cmd from : http://localhost/phpquiz/...