CVE-2006-0628

Description

myquiz.pl in Dale Ray MyQuiz 1.01 allows remote attackers to execute arbitrary commands via shell metacharacters in the URL, which are not properly handled as part of the PATH_INFO environment variable.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/24501

http://www.vupen.com/english/advisories/2006/0443

http://www.securityfocus.com/archive/1/424266/100/0/threaded

http://www.securityfocus.com/archive/1/423921/100/0/threaded

http://www.osvdb.org/22925

http://www.corantodemo.net/coranto/viewnews.cgi?id=EpApAAAVkyirPGThSf&style=dldetails

http://securityreason.com/securityalert/409

http://secunia.com/advisories/18737

http://attrition.org/pipermail/vim/2006-February/000537.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS