CVE-2006-0628

ALTO 7.5CVE-2006-0628 · Published 10/02/2006 · updated 16/06/2026

In breve

CVE-2006-0628 è una vulnerabilità ALTO (CVSS 7.5) che riguarda myquiz (dale ray).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 5.7%, superiore al 93.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
myquiz dale_ray	`= 1.01`	No fix yet

Description

myquiz.pl in Dale Ray MyQuiz 1.01 allows remote attackers to execute arbitrary commands via shell metacharacters in the URL, which are not properly handled as part of the PATH_INFO environment variable.

References

attrition.org/pipermail/vim/2006-February/000537.html
secunia.com/advisories/18737
securityreason.com/securityalert/409
corantodemo.net/coranto/viewnews.cgi · Patch
evuln.com/vulns/57/summary.html · Exploit
osvdb.org/22925
securityfocus.com/archive/1/423921/100/0/threaded
securityfocus.com/archive/1/424266/100/0/threaded
vupen.com/english/advisories/2006/0443
exchange.xforce.ibmcloud.com/vulnerabilities/24501

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free