Lucene search
HistoryMay 13, 2014 - 3:55 p.m.
CVE-2013-4500
cve-2013-4500
drupal
quiz module
authenticated users
remote access
results deletion
4.9 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.3%
The Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote authenticated users with the “view any quiz results” or “view results for own quiz” permission to delete arbitrary results via the delete option.
Affected configurations
Node
quiz_module_projectquizMatch6.x-4.0-drupal
ORquiz_module_projectquizMatch6.x-4.0alpha1drupal
ORquiz_module_projectquizMatch6.x-4.0alpha2drupal
ORquiz_module_projectquizMatch6.x-4.0alpha3drupal
ORquiz_module_projectquizMatch6.x-4.0alpha4drupal
ORquiz_module_projectquizMatch6.x-4.0alpha5drupal
ORquiz_module_projectquizMatch6.x-4.0beta1drupal
ORquiz_module_projectquizMatch6.x-4.0beta2drupal
ORquiz_module_projectquizMatch6.x-4.0beta3drupal
ORquiz_module_projectquizMatch6.x-4.0beta4drupal
ORquiz_module_projectquizMatch6.x-4.0beta5drupal
ORquiz_module_projectquizMatch6.x-4.0beta6drupal
ORquiz_module_projectquizMatch6.x-4.0beta7drupal
ORquiz_module_projectquizMatch6.x-4.0beta8drupal
ORquiz_module_projectquizMatch6.x-4.0devdrupal
ORquiz_module_projectquizMatch6.x-4.0rc1drupal
ORquiz_module_projectquizMatch6.x-4.0rc10drupal
ORquiz_module_projectquizMatch6.x-4.0rc2drupal
ORquiz_module_projectquizMatch6.x-4.0rc3drupal
ORquiz_module_projectquizMatch6.x-4.0rc4drupal
ORquiz_module_projectquizMatch6.x-4.0rc5drupal
ORquiz_module_projectquizMatch6.x-4.0rc6drupal
ORquiz_module_projectquizMatch6.x-4.0rc7drupal
ORquiz_module_projectquizMatch6.x-4.0rc8drupal
ORquiz_module_projectquizMatch6.x-4.0rc9drupal
ORquiz_module_projectquizMatch6.x-4.1drupal
ORquiz_module_projectquizMatch6.x-4.2drupal
ORquiz_module_projectquizMatch6.x-4.3drupal
ORquiz_module_projectquizMatch6.x-4.4drupal
Related
prion
prion
Information disclosure
2014-05-13 15:55:00
nvd
nvd
CVE-2013-4500
2014-05-13 15:55:04
cvelist
cvelist
CVE-2013-4500
2014-05-13 15:00:00
drupal
drupal
SA-CONTRIB-2013-083 - Quiz - Access Bypass
2013-10-30 00:00:00
4.9 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.3%
Related for CVE-2013-4500