Vulnerabilities > CVE-2006-0628 - Unspecified vulnerability in Dale RAY Myquiz 1.01

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
dale-ray
exploit available
NVD
Published: 2006-02-10
Updated: 2024-11-21

Summary

myquiz.pl in Dale Ray MyQuiz 1.01 allows remote attackers to execute arbitrary commands via shell metacharacters in the URL, which are not properly handled as part of the PATH_INFO environment variable.

Vulnerable Configurations

Part Description Count
Application
Dale_Ray
1

Exploit-Db

descriptionMyQuiz 1.01 (PATH_INFO) Arbitrary Command Execution Exploit. CVE-2006-0628. Webapps exploit for cgi platform
idEDB-ID:1471
last seen2016-01-31
modified2006-02-06
published2006-02-06
reporterHessam-x
sourcehttps://www.exploit-db.com/download/1471/
titleMyQuiz 1.01 PATH_INFO Arbitrary Command Execution Exploit

References