CVE-2007-6172

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewimage.php and (2) comments.php.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.59% chance of exploitation in the next 30 days, 75th percentile

Published

2007-11-30

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/4668

Security advisories

• http://secunia.com/advisories/27843
• http://www.securityfocus.com/bid/26611
• http://www.securityfocus.com/bid/26621

References

• CVE Record
• NVD entry