CVE-2014-100023

Description

References

• secunia.com/advisories/57491
• exchange.xforce.ibmcloud.com/vulnerabilities/91949
• exchange.xforce.ibmcloud.com/vulnerabilities/91950
• security.dxw.com/advisories/admin-xss-and-sqli-in-mtouch-quiz-3-0-6 · Exploit
• wordpress.org/plugins/mtouch-quiz/changelog · Patch

Altre vulnerabilità di mtouch quiz

• CVE-2022-2410MEDIO 4.8The mTouch Quiz WordPress plugin through 3.1.3 does not sanitise and escape some of its settings, which could allow high privilege users suc…
• CVE-2015-9389MEDIO 5.4The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via a quiz name.
• CVE-2015-9388MEDIO 6.5The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/edit.php CSRF with resultant XSS.
• CVE-2015-9387MEDIO 6.5The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF.
• CVE-2015-9386MEDIO 6.1The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via the quiz parameter during a Quiz Manage operation.