CVE-2014-100022

概要

参考情報

• secunia.com/advisories/57491
• exchange.xforce.ibmcloud.com/vulnerabilities/91950
• security.dxw.com/advisories/admin-xss-and-sqli-in-mtouch-quiz-3-0-6 · Exploit
• wordpress.org/plugins/mtouch-quiz/changelog · Patch

mtouch quiz のその他の脆弱性

• CVE-2022-2410中 4.8The mTouch Quiz WordPress plugin through 3.1.3 does not sanitise and escape some of its settings, which could allow high privilege users suc…
• CVE-2015-9389中 5.4The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via a quiz name.
• CVE-2015-9388中 6.5The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/edit.php CSRF with resultant XSS.
• CVE-2015-9387中 6.5The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF.
• CVE-2015-9386中 6.1The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via the quiz parameter during a Quiz Manage operation.