Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and previous versions allow remote malicious users to execute arbitrary SQL commands via (1) the univers parameter in score.php and (2) the quiz_id parameter in home.php, accessed through the front/ URI.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
walter beschmout phpquiz |