CVE-2006-0628

Published: Feb 10, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

myquiz.pl in Dale Ray MyQuiz 1.01 allows remote attackers to execute arbitrary commands via shell metacharacters in the URL, which are not properly handled as part of the PATH_INFO environment variable.

Affected (1)

Products: Dale Ray: Myquiz

Dale Ray

1 product

Myquiz

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dale Ray Myquiz	Version 1.01

References (20)

http://attrition.org/pipermail/vim/2006-February/000537.html

Source: cve@mitre.org

http://secunia.com/advisories/18737

Source: cve@mitre.org

http://securityreason.com/securityalert/409

Source: cve@mitre.org

http://www.corantodemo.net/coranto/viewnews.cgi?id=EpApAAAVkyirPGThSf&style=dldetails

Source: cve@mitre.org

Patch

http://www.evuln.com/vulns/57/summary.html

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.osvdb.org/22925

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/423921/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/424266/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0443

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24501

Source: cve@mitre.org

http://attrition.org/pipermail/vim/2006-February/000537.html