PT-2014-2808

CVE-2013-4500

·

Published

2014-05-13

·

Updated

2014-05-14

Description by

CVSS 2.0
4.9
Medium
MetricsAV:N/AC:M/Au:S/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions Quiz module versions 6.x-4.x before 6.x-4.5
Description The issue allows remote authenticated users with the view any quiz results or view results for own quiz permission to delete arbitrary results.
Recommendations For versions prior to 6.x-4.5, update to version 6.x-4.5 or later to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2013-4500
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com