Unrated severityNVD Advisory· Published Nov 30, 2007· Updated Apr 23, 2026

CVE-2007-6172

Description

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewimage.php and (2) comments.php.

Affected products

Wire Plastic Design/Wpquiz
cpe:2.3:a:wire_plastic_design:wpquiz:2.7:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/26611nvdExploit
secunia.com/advisories/27843nvdVendor Advisory
www.securityfocus.com/bid/26621nvd
exchange.xforce.ibmcloud.com/vulnerabilities/38680nvd
www.exploit-db.com/exploits/4668nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000