CyberSec.Space Logo
返回 CVE 浏览器

CVE-2007-6172

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1270%
EPSS Percentile18.71th
Published2007年11月30日
Last Modified2026年4月23日

Vulnerability Description

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewimage.php and (2) comments.php.

Affected Platforms (CPE)

📦
Wire Plastic Design

Wpquiz

= 2.7

References & Advisories

🔗 http://secunia.com/advisories/27843
🔗 http://www.securityfocus.com/bid/26611
🔗 http://www.securityfocus.com/bid/26621
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/38680
🔗 https://www.exploit-db.com/exploits/4668
🔗 http://secunia.com/advisories/27843
🔗 http://www.securityfocus.com/bid/26611
🔗 http://www.securityfocus.com/bid/26621

相关漏洞威胁

CVE-2004-17047.5

WpQuiz 2.60b1 through 2.60b8 allows remote attackers to gain privileges via a direct request to adminrestore.php in the extras dir...

CVE-2010-36087.5

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the (1) id and (...

CVE-2007-023610.0

Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attacker...

CVE-2007-025410.0

Format string vulnerability in the errors_create_window function in errors.c in xine-ui allows attackers to execute arbitrary code...