Vulnerabilities > Webwork > Program Generation Language

DATE CVE VULNERABILITY TITLE RISK
2006-12-18 CVE-2006-6629 Unspecified vulnerability in Webwork Program Generation Language
lib/WeBWorK/PG/Translator.pm in WeBWorK Program Generation (PG) Language before 2.3.1 uses an insufficiently restrictive regular expression to determine valid macro filenames, which allows attackers to load arbitrary macro files whose names contain the strings (1) dangerousMacros.pl, (2) PG.pl, or (3) IO.pl.
network
low complexity
webwork
7.5