CVE-2007-6172

wpQuiz <2.7 - SQL Injection

Title source: llm

Description

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewimage.php and (2) comments.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Kacper · textwebappsphp

https://www.exploit-db.com/exploits/4668

View Code ZIP pw:eip

References (5)

[Vendor Advisory] http://secunia.com/advisories/27843

[Exploit] http://www.securityfocus.com/bid/26611

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/38680

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/26621

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/4668

Scores

EPSS 0.0057

EPSS Percentile 68.2%

Classification

CWE

CWE-89

Status draft

Affected Products (1)

wire_plastic_design/wpquiz

Timeline

Published Nov 30, 2007

Tracked Since Feb 18, 2026