CVE

Id
16899  
CVE No.
CVE-2006-0795  
Status
Candidate  
Description
Absolute path traversal vulnerability in convert.cgi in Quirex 2.0.2 and earlier allows remote attackers to read arbitrary files, and possibly execute arbitrary code, via the (1) quiz_head, (2) quiz_foot, and (3) template variables.  
Phase
Assigned (20060219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
137713 16899 CVE-2006-0795 BUGTRAQ:20060226 [eVuln] Quirex Arbitrary File Disclosure Vulnerability  View
137714 16899 CVE-2006-0795 URL:http://www.securityfocus.com/archive/1/archive/1/426188/100/0/threaded  View
137715 16899 CVE-2006-0795 MISC:http://evuln.com/vulns/78/summary.html  View
137716 16899 CVE-2006-0795 BID:16709  View
137717 16899 CVE-2006-0795 URL:http://www.securityfocus.com/bid/16709  View
137718 16899 CVE-2006-0795 VUPEN:ADV-2006-0641  View
137719 16899 CVE-2006-0795 URL:http://www.vupen.com/english/advisories/2006/0641  View
137720 16899 CVE-2006-0795 SECUNIA:18926  View
137721 16899 CVE-2006-0795 URL:http://secunia.com/advisories/18926  View
137722 16899 CVE-2006-0795 XF:quirex-convert-information-disclosure(24672)  View

Related JVN