CVE-2010-3608 in wpQuizinfo

Summary

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) password (pw) parameters to (a) admin.php or (b) user.php.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

09/24/2010

Disclosure

09/24/2010

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!