Product

myknowledgequest knowledgequest vulnerabilities

2 published CVES affecting myknowledgequest knowledgequest, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 2
Critical: 0
High: 1
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest myknowledgequest knowledgequest CVEs

Newest publication first

CVE-2008-1726 Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) kqid parameter to (a) articletext....
Published 2008-04-11

MediumCVSS 6.8 EPSS 1.6%

Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) kqid parameter to (a) articletext.php and (b) articletextonly.php and the (2) username parameter to (c) logincheck...
CVE-2008-1727 KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts.
Published 2008-04-11

HighCVSS 7.5 EPSS 6.9%

KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

myknowledgequest knowledgequest vulnerabilities

Latest myknowledgequest knowledgequest CVEs

CVE-2008-1726 Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) kqid parameter to (a) articletext....

CVE-2008-1727 KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts.