CVE-2013-4500 in Quiz

Tóm tắt

Bởi MITRE

The Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote authenticated users with the "view any quiz results" or "view results for own quiz" permission to delete arbitrary results via the delete option.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Đặt trước: 12/06/2013
• Tiết lộ: 13/05/2014
• Kiểm duyệt: được chấp nhận
• mục: VDB-69661
• CPE: sẵn sàng
• CWE: CWE-264 (Đã xác nhận)
• CVSS: 5.4 (VulDB)
• EPSS: 0.01055
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-4500
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-4500
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-4500/