The Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote authenticated users with the "view any quiz results" or "view results for own quiz" permission to delete arbitrary results via the delete option.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2014-05-13T15:00:00

Updated: 2024-08-06T16:45:14.787Z

Reserved: 2013-06-12T00:00:00

Link: CVE-2013-4500

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2014-05-13T15:55:04.013

Modified: 2014-05-14T16:36:34.140

Link: CVE-2013-4500

cve-icon Redhat

No data.