CVE-2007-6172

The CVE-2007-6172 entry affects wpQuiz 2.7, with multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the id parameter to viewimage.php and comments.php. The issue is confirmed across multiple sources in the connected documents, indicating a hig...

CVE-2010-3608

CVE-2010-3608 concerns wpQuiz 2.7 and describes multiple SQL injection vulnerabilities that permit remote attackers to execute arbitrary SQL commands via the (1) id and (2) password (pw) parameters to (a) admin.php or (b) user.php. The connected sources corroborate the vulnerability pattern and C...

CVE-2004-1704

WpQuiz versions 2.60b1–2.60b8 are affected by a privilege-escalation vulnerability exploitable via a direct request to adminrestore.php in the extras directory. The issue is described as allowing remote attackers to gain privileges. Exploit details, affected platforms beyond the product/version r...