Vulnerabilities

TI-2008-01655 CVE-2008-1727 · GHSA-39fp-4vw2-5x9f

KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php…

MEDIUM 43

KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0685 Published 2008-04-11 No fix listed CWE-287

TI-2008-01654 CVE-2008-1726 · GHSA-79x7-wpq4-76rr

Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is…

LOW 33

Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) kqid parameter to (a) articletext.php and (b) articlet…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0158 Published 2008-04-11 No fix listed CWE-89

Vulnerabilities

Filters

KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php…

Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is…