← Back

CVE-2013-4500

nvd nist
Published: May 13, 2014Modified: May 6, 2026

JSON object

Loading...
4.9
Vector
AV:N/AC:M/Au:S/C:N/I:P/A:P
Exploitability: 6.8 / Impact: 4.9
Source: NVD

Description

The Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote authenticated users with the "view any quiz results" or "view results for own quiz" permission to delete arbitrary results via the delete option.

Affected (29)

Quiz
Configuration A
29 vulnerable
Vulnerable SoftwareAffected Versions
Version 6.x-4.0
Version 6.x-4.0 alpha1
Version 6.x-4.0 alpha2
Version 6.x-4.0 alpha3
Version 6.x-4.0 alpha4
Version 6.x-4.0 alpha5
Version 6.x-4.0 beta1
Version 6.x-4.0 beta2
Version 6.x-4.0 beta3
Version 6.x-4.0 beta4
Version 6.x-4.0 beta5
Version 6.x-4.0 beta6
Version 6.x-4.0 beta7
Version 6.x-4.0 beta8
Version 6.x-4.0 dev
Version 6.x-4.0 rc10
Version 6.x-4.0 rc1
Version 6.x-4.0 rc2
Version 6.x-4.0 rc3
Version 6.x-4.0 rc4
Version 6.x-4.0 rc5
Version 6.x-4.0 rc6
Version 6.x-4.0 rc7
Version 6.x-4.0 rc8
Version 6.x-4.0 rc9
Version 6.x-4.1
Version 6.x-4.2
Version 6.x-4.3
Version 6.x-4.4

Related CWEs

References (6)

Source: secalert@redhat.com
Source: secalert@redhat.com
Patch
Source: secalert@redhat.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.