What’s Vulnerable › Vulnerabilities

CVE-2013-4500

• Severity: medium (CVSS 4.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-05-13 · updated 2026-06-16
• Weakness: CWE-264

Description

The Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote authenticated users with the "view any quiz results" or "view results for own quiz" permission to delete arbitrary results via the delete option.

Affected products

• Quiz Module Project Quiz: 6.x-4.0, 6.x-4.0-alpha1, 6.x-4.0-alpha2, 6.x-4.0-alpha3, 6.x-4.0-alpha4, 6.x-4.0-alpha5 (+23)

References

• http://seclists.org/oss-sec/2013/q4/210
• https://drupal.org/node/2123727
• https://drupal.org/node/2123995
• http://seclists.org/oss-sec/2013/q4/210
• https://drupal.org/node/2123727
• https://drupal.org/node/2123995

Get alerted when CVE-2013-4500 or the next vulnerability affects your stack