Unscored severity · published May 13, 2014
CVE-2013-4500
The Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote authenticated users with the "view any quiz results" or "view results for own quiz" permission to delete arbitrary…
–
CVSS
1.1%
EPSS
No
On KEV
Description
The Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote authenticated users with the "view any quiz results" or "view results for own quiz" permission to delete arbitrary results via the delete option.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QU
Quiz · Quiz Module Project
6.x-4.0; 6.x-4.0; 6.x-4.0; 6.x-4.0; 6.x-4.0; 6.x-4.0; +23 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4500
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4500
seclists.org
http://seclists.org/oss-sec/2013/q4/210
Patch
https://drupal.org/node/2123727
Patch
https://drupal.org/node/2123995
More from Quiz
–
CVE-2013-4501
The default views in the Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote attackers to obtain sensitive quiz results via unspecified vectors