CVE-2014-100022

Currently unrated

Key Information:

Vendor
Wordpress
Status
Mtouch Quiz
Vendor
CVE Published:
13 January 2015

Summary

SQL injection vulnerability in question.php in the mTouch Quiz before 3.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the quiz parameter to wp-admin/edit.php.

References

http://secunia.com/advisories/57491
third-party-advisoryx_refsource_SECUNIA
https://wordpress.org/plugins/mtouch-quiz/changelog/
x_refsource_CONFIRM
https://security.dxw.com/advisories/admin-xss-and-sqli-in...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.