CVE-2010-3608

Wire Plastic Design Wpquiz - SQL Injection

Title source: rule

Description

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) password (pw) parameters to (a) admin.php or (b) user.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by KnocKout · textwebappsphp

https://www.exploit-db.com/exploits/15075

View Code ZIP pw:eip

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/43384

Exploit exploit x_refsource_exploit-db

http://www.exploit-db.com/exploits/15075

Exploit x_refsource_misc

http://packetstormsecurity.org/1009-exploits/wpquiz27-sql.txt

Scores

EPSS 0.0072

EPSS Percentile 72.6%

Details

CWE

CWE-89

Status published

Products (1)

wire_plastic_design/wpquiz 2.7

Published Sep 24, 2010

Tracked Since Feb 18, 2026