Vendor
Quiz Project
Products
1
CVEs
4
Across products
4
Status
Private
Products
1- 4 CVEs
Recent CVEs
4| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2008-0799 | 0.03 | — | 0.01 | Feb 15, 2008 | SQL injection vulnerability in index.php in the Quiz (com_quiz) 0.81 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a user_tst_shw action. | |||
| CVE-2024-34401 | 0.00 | — | 0.00 | May 3, 2024 | Savsoft Quiz 6.0 allows stored XSS via the index.php/quiz/insert_quiz/ quiz_name parameter. | |||
| CVE-2020-35349 | 0.00 | — | 0.01 | Dec 26, 2020 | Savsoft Quiz 5 is affected by: Cross Site Scripting (XSS) via field_title (aka a title on the custom fields page). | |||
| CVE-2015-6736 | 0.00 | — | 0.03 | Sep 1, 2015 | The Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex metacharacters in a regular expression. |
- CVE-2008-0799Feb 15, 2008risk 0.03cvss —epss 0.01
SQL injection vulnerability in index.php in the Quiz (com_quiz) 0.81 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a user_tst_shw action.
- CVE-2024-34401May 3, 2024risk 0.00cvss —epss 0.00
Savsoft Quiz 6.0 allows stored XSS via the index.php/quiz/insert_quiz/ quiz_name parameter.
- CVE-2020-35349Dec 26, 2020risk 0.00cvss —epss 0.01
Savsoft Quiz 5 is affected by: Cross Site Scripting (XSS) via field_title (aka a title on the custom fields page).
- CVE-2015-6736Sep 1, 2015risk 0.00cvss —epss 0.03
The Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex metacharacters in a regular expression.