| CVE-2013-4500 | Date: (C)2014-05-15 (M)2023-12-22 |
The Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote authenticated users with the "view any quiz results" or "view results for own quiz" permission to delete arbitrary results via the delete option.
CVSS Score and Metrics +CVSS Score and Metrics -| CVSS V2 Severity: |
| CVSS Score : 4.9 |
| Exploit Score: 6.8 |
| Impact Score: 4.9 |
| |
| CVSS V2 Metrics: |
| Access Vector: NETWORK |
| Access Complexity: MEDIUM |
| Authentication: SINGLE |
| Confidentiality: NONE |
| Integrity: PARTIAL |
| Availability: PARTIAL |
| | |
