← Database

CVE-2007-6172

CRITICAL CVSS: 10.0 Published: 2007-11-30 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewimage.php and (2) comments.php.

Affected Platforms

Wire Plastic Design Wpquiz

Weakness Type

CWE-89

References