CVEvulnerability
CVE-2010-3608
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-09-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) password (pw) parameters to (a) admin.php or (b) user.php.
Affected configurations
• wire plastic design wpquiz 2.7
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://packetstormsecurity.org/1009-exploits/wpquiz27-sql.txt Exploit
- http://www.exploit-db.com/exploits/15075 Exploit
- http://www.securityfocus.com/bid/43384 www.securityfocus.com
- http://packetstormsecurity.org/1009-exploits/wpquiz27-sql.txt Exploit
- http://www.exploit-db.com/exploits/15075 Exploit
- http://www.securityfocus.com/bid/43384 www.securityfocus.com