CVE-2018-14502: SQL Injection
First published: Tue Mar 10 2020(Updated: )
controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrary SQL commands via the 'answer' and 'answers' parameters.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Kibokolabs Chained Quiz | <1.0.9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2018-14502.
What is the title of this vulnerability?
The title of this vulnerability is controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote u…
What is the severity of CVE-2018-14502?
The severity of CVE-2018-14502 is critical, with a severity value of 9.8.
What software is affected by CVE-2018-14502?
The Kiboko Chained Quiz plugin before version 1.0.9 for WordPress is affected by CVE-2018-14502.
How can remote unauthenticated users exploit CVE-2018-14502?
Remote unauthenticated users can exploit CVE-2018-14502 by executing arbitrary SQL commands via the 'answer' and 'answers' parameters.
- collector/nvd-index
- vendor/kibokolabs
- canonical/kibokolabs chained quiz