Search

Find a vulnerability

Search criteria

    6 vulnerabilities by walter_beschmout

    CVE-2006-4977 (GCVE-0-2006-4977)

    Vulnerability from nvd – Published: 2006-09-25 01:00 – Updated: 2024-08-07 19:32
    VLAI
    Summary
    Multiple unrestricted file upload vulnerabilities in (1) back/upload_img.php and (2) admin/upload_img.php in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to upload arbitrary PHP code to the phpquiz/img_quiz folder via the (a) upload, (b) ok_update, (c) image, and (d) path parameters, possibly requiring directory traversal sequences in the path parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 28/100 over 2266 records in the last 180 days details
    References
    URL Tags
    https://www.exploit-db.com/exploits/2376 exploitx_refsource_EXPLOIT-DB
    http://www.vupen.com/english/advisories/2006/3693 vdb-entryx_refsource_VUPEN
    http://www.morx.org/phpquiz.txt x_refsource_MISC
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://securityreason.com/securityalert/1627 third-party-advisoryx_refsource_SREASON
    http://secunia.com/advisories/22015 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/20065 vdb-entryx_refsource_BID
    http://www.securityfocus.com/archive/1/446315/100… mailing-listx_refsource_BUGTRAQ
    Date Public
    2006-09-16 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T19:32:22.303Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "2376",
                "tags": [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
                  "x_transferred"
                ],
                "url": "https://www.exploit-db.com/exploits/2376"
              },
              {
                "name": "ADV-2006-3693",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/3693"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://www.morx.org/phpquiz.txt"
              },
              {
                "name": "phpquiz-uploadimg-file-upload(28995)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28995"
              },
              {
                "name": "1627",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SREASON",
                  "x_transferred"
                ],
                "url": "http://securityreason.com/securityalert/1627"
              },
              {
                "name": "22015",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/22015"
              },
              {
                "name": "20065",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/20065"
              },
              {
                "name": "20060916 PHPQuiz Multiple Remote Vulnerabilites",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/446315/100/0/threaded"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-09-16T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple unrestricted file upload vulnerabilities in (1) back/upload_img.php and (2) admin/upload_img.php in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to upload arbitrary PHP code to the phpquiz/img_quiz folder via the (a) upload, (b) ok_update, (c) image, and (d) path parameters, possibly requiring directory traversal sequences in the path parameter."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-10-17T20:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "2376",
              "tags": [
                "exploit",
                "x_refsource_EXPLOIT-DB"
              ],
              "url": "https://www.exploit-db.com/exploits/2376"
            },
            {
              "name": "ADV-2006-3693",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/3693"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://www.morx.org/phpquiz.txt"
            },
            {
              "name": "phpquiz-uploadimg-file-upload(28995)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28995"
            },
            {
              "name": "1627",
              "tags": [
                "third-party-advisory",
                "x_refsource_SREASON"
              ],
              "url": "http://securityreason.com/securityalert/1627"
            },
            {
              "name": "22015",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/22015"
            },
            {
              "name": "20065",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/20065"
            },
            {
              "name": "20060916 PHPQuiz Multiple Remote Vulnerabilites",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/446315/100/0/threaded"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-4977",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple unrestricted file upload vulnerabilities in (1) back/upload_img.php and (2) admin/upload_img.php in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to upload arbitrary PHP code to the phpquiz/img_quiz folder via the (a) upload, (b) ok_update, (c) image, and (d) path parameters, possibly requiring directory traversal sequences in the path parameter."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "2376",
                  "refsource": "EXPLOIT-DB",
                  "url": "https://www.exploit-db.com/exploits/2376"
                },
                {
                  "name": "ADV-2006-3693",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/3693"
                },
                {
                  "name": "http://www.morx.org/phpquiz.txt",
                  "refsource": "MISC",
                  "url": "http://www.morx.org/phpquiz.txt"
                },
                {
                  "name": "phpquiz-uploadimg-file-upload(28995)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28995"
                },
                {
                  "name": "1627",
                  "refsource": "SREASON",
                  "url": "http://securityreason.com/securityalert/1627"
                },
                {
                  "name": "22015",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/22015"
                },
                {
                  "name": "20065",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/20065"
                },
                {
                  "name": "20060916 PHPQuiz Multiple Remote Vulnerabilites",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/446315/100/0/threaded"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-4977",
        "datePublished": "2006-09-25T01:00:00.000Z",
        "dateReserved": "2006-09-24T00:00:00.000Z",
        "dateUpdated": "2024-08-07T19:32:22.303Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-4979 (GCVE-0-2006-4979)

    Vulnerability from nvd – Published: 2006-09-25 01:00 – Updated: 2024-08-07 19:32
    VLAI
    Summary
    Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows remote attackers to inject arbitrary PHP code in config.inc.php via modified configuration settings.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 28/100 over 2266 records in the last 180 days details
    References
    URL Tags
    https://www.exploit-db.com/exploits/2376 exploitx_refsource_EXPLOIT-DB
    http://www.vupen.com/english/advisories/2006/3693 vdb-entryx_refsource_VUPEN
    http://www.morx.org/phpquiz.txt x_refsource_MISC
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://securityreason.com/securityalert/1627 third-party-advisoryx_refsource_SREASON
    http://secunia.com/advisories/22015 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/20065 vdb-entryx_refsource_BID
    http://www.securityfocus.com/archive/1/446315/100… mailing-listx_refsource_BUGTRAQ
    Date Public
    2006-09-16 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T19:32:23.069Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "2376",
                "tags": [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
                  "x_transferred"
                ],
                "url": "https://www.exploit-db.com/exploits/2376"
              },
              {
                "name": "ADV-2006-3693",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/3693"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://www.morx.org/phpquiz.txt"
              },
              {
                "name": "phpquiz-install-code-execution(28997)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28997"
              },
              {
                "name": "1627",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SREASON",
                  "x_transferred"
                ],
                "url": "http://securityreason.com/securityalert/1627"
              },
              {
                "name": "22015",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/22015"
              },
              {
                "name": "20065",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/20065"
              },
              {
                "name": "20060916 PHPQuiz Multiple Remote Vulnerabilites",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/446315/100/0/threaded"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-09-16T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows remote attackers to inject arbitrary PHP code in config.inc.php via modified configuration settings."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-10-17T20:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "2376",
              "tags": [
                "exploit",
                "x_refsource_EXPLOIT-DB"
              ],
              "url": "https://www.exploit-db.com/exploits/2376"
            },
            {
              "name": "ADV-2006-3693",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/3693"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://www.morx.org/phpquiz.txt"
            },
            {
              "name": "phpquiz-install-code-execution(28997)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28997"
            },
            {
              "name": "1627",
              "tags": [
                "third-party-advisory",
                "x_refsource_SREASON"
              ],
              "url": "http://securityreason.com/securityalert/1627"
            },
            {
              "name": "22015",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/22015"
            },
            {
              "name": "20065",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/20065"
            },
            {
              "name": "20060916 PHPQuiz Multiple Remote Vulnerabilites",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/446315/100/0/threaded"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-4979",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows remote attackers to inject arbitrary PHP code in config.inc.php via modified configuration settings."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "2376",
                  "refsource": "EXPLOIT-DB",
                  "url": "https://www.exploit-db.com/exploits/2376"
                },
                {
                  "name": "ADV-2006-3693",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/3693"
                },
                {
                  "name": "http://www.morx.org/phpquiz.txt",
                  "refsource": "MISC",
                  "url": "http://www.morx.org/phpquiz.txt"
                },
                {
                  "name": "phpquiz-install-code-execution(28997)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28997"
                },
                {
                  "name": "1627",
                  "refsource": "SREASON",
                  "url": "http://securityreason.com/securityalert/1627"
                },
                {
                  "name": "22015",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/22015"
                },
                {
                  "name": "20065",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/20065"
                },
                {
                  "name": "20060916 PHPQuiz Multiple Remote Vulnerabilites",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/446315/100/0/threaded"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-4979",
        "datePublished": "2006-09-25T01:00:00.000Z",
        "dateReserved": "2006-09-24T00:00:00.000Z",
        "dateUpdated": "2024-08-07T19:32:23.069Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-4978 (GCVE-0-2006-4978)

    Vulnerability from nvd – Published: 2006-09-25 01:00 – Updated: 2024-08-07 19:32
    VLAI
    Summary
    Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the univers parameter in score.php and (2) the quiz_id parameter in home.php, accessed through the front/ URI.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 28/100 over 2266 records in the last 180 days details
    References
    URL Tags
    https://www.exploit-db.com/exploits/2376 exploitx_refsource_EXPLOIT-DB
    http://www.vupen.com/english/advisories/2006/3693 vdb-entryx_refsource_VUPEN
    http://www.morx.org/phpquiz.txt x_refsource_MISC
    http://securityreason.com/securityalert/1627 third-party-advisoryx_refsource_SREASON
    http://secunia.com/advisories/22015 third-party-advisoryx_refsource_SECUNIA
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.securityfocus.com/bid/20065 vdb-entryx_refsource_BID
    http://www.securityfocus.com/archive/1/446315/100… mailing-listx_refsource_BUGTRAQ
    Date Public
    2006-09-16 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T19:32:22.387Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "2376",
                "tags": [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
                  "x_transferred"
                ],
                "url": "https://www.exploit-db.com/exploits/2376"
              },
              {
                "name": "ADV-2006-3693",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/3693"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://www.morx.org/phpquiz.txt"
              },
              {
                "name": "1627",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SREASON",
                  "x_transferred"
                ],
                "url": "http://securityreason.com/securityalert/1627"
              },
              {
                "name": "22015",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/22015"
              },
              {
                "name": "phpquiz-score-sql-injection(28993)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28993"
              },
              {
                "name": "20065",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/20065"
              },
              {
                "name": "20060916 PHPQuiz Multiple Remote Vulnerabilites",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/446315/100/0/threaded"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-09-16T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the univers parameter in score.php and (2) the quiz_id parameter in home.php, accessed through the front/ URI."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-10-17T20:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "2376",
              "tags": [
                "exploit",
                "x_refsource_EXPLOIT-DB"
              ],
              "url": "https://www.exploit-db.com/exploits/2376"
            },
            {
              "name": "ADV-2006-3693",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/3693"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://www.morx.org/phpquiz.txt"
            },
            {
              "name": "1627",
              "tags": [
                "third-party-advisory",
                "x_refsource_SREASON"
              ],
              "url": "http://securityreason.com/securityalert/1627"
            },
            {
              "name": "22015",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/22015"
            },
            {
              "name": "phpquiz-score-sql-injection(28993)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28993"
            },
            {
              "name": "20065",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/20065"
            },
            {
              "name": "20060916 PHPQuiz Multiple Remote Vulnerabilites",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/446315/100/0/threaded"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-4978",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the univers parameter in score.php and (2) the quiz_id parameter in home.php, accessed through the front/ URI."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "2376",
                  "refsource": "EXPLOIT-DB",
                  "url": "https://www.exploit-db.com/exploits/2376"
                },
                {
                  "name": "ADV-2006-3693",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/3693"
                },
                {
                  "name": "http://www.morx.org/phpquiz.txt",
                  "refsource": "MISC",
                  "url": "http://www.morx.org/phpquiz.txt"
                },
                {
                  "name": "1627",
                  "refsource": "SREASON",
                  "url": "http://securityreason.com/securityalert/1627"
                },
                {
                  "name": "22015",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/22015"
                },
                {
                  "name": "phpquiz-score-sql-injection(28993)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28993"
                },
                {
                  "name": "20065",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/20065"
                },
                {
                  "name": "20060916 PHPQuiz Multiple Remote Vulnerabilites",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/446315/100/0/threaded"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-4978",
        "datePublished": "2006-09-25T01:00:00.000Z",
        "dateReserved": "2006-09-24T00:00:00.000Z",
        "dateUpdated": "2024-08-07T19:32:22.387Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-4977 (GCVE-0-2006-4977)

    Vulnerability from cvelistv5 – Published: 2006-09-25 01:00 – Updated: 2024-08-07 19:32
    VLAI
    Summary
    Multiple unrestricted file upload vulnerabilities in (1) back/upload_img.php and (2) admin/upload_img.php in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to upload arbitrary PHP code to the phpquiz/img_quiz folder via the (a) upload, (b) ok_update, (c) image, and (d) path parameters, possibly requiring directory traversal sequences in the path parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 28/100 over 2266 records in the last 180 days details
    References
    URL Tags
    https://www.exploit-db.com/exploits/2376 exploitx_refsource_EXPLOIT-DB
    http://www.vupen.com/english/advisories/2006/3693 vdb-entryx_refsource_VUPEN
    http://www.morx.org/phpquiz.txt x_refsource_MISC
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://securityreason.com/securityalert/1627 third-party-advisoryx_refsource_SREASON
    http://secunia.com/advisories/22015 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/20065 vdb-entryx_refsource_BID
    http://www.securityfocus.com/archive/1/446315/100… mailing-listx_refsource_BUGTRAQ
    Date Public
    2006-09-16 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T19:32:22.303Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "2376",
                "tags": [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
                  "x_transferred"
                ],
                "url": "https://www.exploit-db.com/exploits/2376"
              },
              {
                "name": "ADV-2006-3693",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/3693"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://www.morx.org/phpquiz.txt"
              },
              {
                "name": "phpquiz-uploadimg-file-upload(28995)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28995"
              },
              {
                "name": "1627",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SREASON",
                  "x_transferred"
                ],
                "url": "http://securityreason.com/securityalert/1627"
              },
              {
                "name": "22015",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/22015"
              },
              {
                "name": "20065",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/20065"
              },
              {
                "name": "20060916 PHPQuiz Multiple Remote Vulnerabilites",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/446315/100/0/threaded"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-09-16T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple unrestricted file upload vulnerabilities in (1) back/upload_img.php and (2) admin/upload_img.php in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to upload arbitrary PHP code to the phpquiz/img_quiz folder via the (a) upload, (b) ok_update, (c) image, and (d) path parameters, possibly requiring directory traversal sequences in the path parameter."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-10-17T20:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "2376",
              "tags": [
                "exploit",
                "x_refsource_EXPLOIT-DB"
              ],
              "url": "https://www.exploit-db.com/exploits/2376"
            },
            {
              "name": "ADV-2006-3693",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/3693"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://www.morx.org/phpquiz.txt"
            },
            {
              "name": "phpquiz-uploadimg-file-upload(28995)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28995"
            },
            {
              "name": "1627",
              "tags": [
                "third-party-advisory",
                "x_refsource_SREASON"
              ],
              "url": "http://securityreason.com/securityalert/1627"
            },
            {
              "name": "22015",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/22015"
            },
            {
              "name": "20065",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/20065"
            },
            {
              "name": "20060916 PHPQuiz Multiple Remote Vulnerabilites",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/446315/100/0/threaded"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-4977",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple unrestricted file upload vulnerabilities in (1) back/upload_img.php and (2) admin/upload_img.php in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to upload arbitrary PHP code to the phpquiz/img_quiz folder via the (a) upload, (b) ok_update, (c) image, and (d) path parameters, possibly requiring directory traversal sequences in the path parameter."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "2376",
                  "refsource": "EXPLOIT-DB",
                  "url": "https://www.exploit-db.com/exploits/2376"
                },
                {
                  "name": "ADV-2006-3693",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/3693"
                },
                {
                  "name": "http://www.morx.org/phpquiz.txt",
                  "refsource": "MISC",
                  "url": "http://www.morx.org/phpquiz.txt"
                },
                {
                  "name": "phpquiz-uploadimg-file-upload(28995)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28995"
                },
                {
                  "name": "1627",
                  "refsource": "SREASON",
                  "url": "http://securityreason.com/securityalert/1627"
                },
                {
                  "name": "22015",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/22015"
                },
                {
                  "name": "20065",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/20065"
                },
                {
                  "name": "20060916 PHPQuiz Multiple Remote Vulnerabilites",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/446315/100/0/threaded"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-4977",
        "datePublished": "2006-09-25T01:00:00.000Z",
        "dateReserved": "2006-09-24T00:00:00.000Z",
        "dateUpdated": "2024-08-07T19:32:22.303Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-4979 (GCVE-0-2006-4979)

    Vulnerability from cvelistv5 – Published: 2006-09-25 01:00 – Updated: 2024-08-07 19:32
    VLAI
    Summary
    Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows remote attackers to inject arbitrary PHP code in config.inc.php via modified configuration settings.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 28/100 over 2266 records in the last 180 days details
    References
    URL Tags
    https://www.exploit-db.com/exploits/2376 exploitx_refsource_EXPLOIT-DB
    http://www.vupen.com/english/advisories/2006/3693 vdb-entryx_refsource_VUPEN
    http://www.morx.org/phpquiz.txt x_refsource_MISC
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://securityreason.com/securityalert/1627 third-party-advisoryx_refsource_SREASON
    http://secunia.com/advisories/22015 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/20065 vdb-entryx_refsource_BID
    http://www.securityfocus.com/archive/1/446315/100… mailing-listx_refsource_BUGTRAQ
    Date Public
    2006-09-16 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T19:32:23.069Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "2376",
                "tags": [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
                  "x_transferred"
                ],
                "url": "https://www.exploit-db.com/exploits/2376"
              },
              {
                "name": "ADV-2006-3693",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/3693"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://www.morx.org/phpquiz.txt"
              },
              {
                "name": "phpquiz-install-code-execution(28997)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28997"
              },
              {
                "name": "1627",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SREASON",
                  "x_transferred"
                ],
                "url": "http://securityreason.com/securityalert/1627"
              },
              {
                "name": "22015",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/22015"
              },
              {
                "name": "20065",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/20065"
              },
              {
                "name": "20060916 PHPQuiz Multiple Remote Vulnerabilites",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/446315/100/0/threaded"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-09-16T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows remote attackers to inject arbitrary PHP code in config.inc.php via modified configuration settings."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-10-17T20:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "2376",
              "tags": [
                "exploit",
                "x_refsource_EXPLOIT-DB"
              ],
              "url": "https://www.exploit-db.com/exploits/2376"
            },
            {
              "name": "ADV-2006-3693",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/3693"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://www.morx.org/phpquiz.txt"
            },
            {
              "name": "phpquiz-install-code-execution(28997)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28997"
            },
            {
              "name": "1627",
              "tags": [
                "third-party-advisory",
                "x_refsource_SREASON"
              ],
              "url": "http://securityreason.com/securityalert/1627"
            },
            {
              "name": "22015",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/22015"
            },
            {
              "name": "20065",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/20065"
            },
            {
              "name": "20060916 PHPQuiz Multiple Remote Vulnerabilites",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/446315/100/0/threaded"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-4979",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows remote attackers to inject arbitrary PHP code in config.inc.php via modified configuration settings."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "2376",
                  "refsource": "EXPLOIT-DB",
                  "url": "https://www.exploit-db.com/exploits/2376"
                },
                {
                  "name": "ADV-2006-3693",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/3693"
                },
                {
                  "name": "http://www.morx.org/phpquiz.txt",
                  "refsource": "MISC",
                  "url": "http://www.morx.org/phpquiz.txt"
                },
                {
                  "name": "phpquiz-install-code-execution(28997)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28997"
                },
                {
                  "name": "1627",
                  "refsource": "SREASON",
                  "url": "http://securityreason.com/securityalert/1627"
                },
                {
                  "name": "22015",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/22015"
                },
                {
                  "name": "20065",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/20065"
                },
                {
                  "name": "20060916 PHPQuiz Multiple Remote Vulnerabilites",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/446315/100/0/threaded"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-4979",
        "datePublished": "2006-09-25T01:00:00.000Z",
        "dateReserved": "2006-09-24T00:00:00.000Z",
        "dateUpdated": "2024-08-07T19:32:23.069Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-4978 (GCVE-0-2006-4978)

    Vulnerability from cvelistv5 – Published: 2006-09-25 01:00 – Updated: 2024-08-07 19:32
    VLAI
    Summary
    Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the univers parameter in score.php and (2) the quiz_id parameter in home.php, accessed through the front/ URI.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 28/100 over 2266 records in the last 180 days details
    References
    URL Tags
    https://www.exploit-db.com/exploits/2376 exploitx_refsource_EXPLOIT-DB
    http://www.vupen.com/english/advisories/2006/3693 vdb-entryx_refsource_VUPEN
    http://www.morx.org/phpquiz.txt x_refsource_MISC
    http://securityreason.com/securityalert/1627 third-party-advisoryx_refsource_SREASON
    http://secunia.com/advisories/22015 third-party-advisoryx_refsource_SECUNIA
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.securityfocus.com/bid/20065 vdb-entryx_refsource_BID
    http://www.securityfocus.com/archive/1/446315/100… mailing-listx_refsource_BUGTRAQ
    Date Public
    2006-09-16 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T19:32:22.387Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "2376",
                "tags": [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
                  "x_transferred"
                ],
                "url": "https://www.exploit-db.com/exploits/2376"
              },
              {
                "name": "ADV-2006-3693",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/3693"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://www.morx.org/phpquiz.txt"
              },
              {
                "name": "1627",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SREASON",
                  "x_transferred"
                ],
                "url": "http://securityreason.com/securityalert/1627"
              },
              {
                "name": "22015",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/22015"
              },
              {
                "name": "phpquiz-score-sql-injection(28993)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28993"
              },
              {
                "name": "20065",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/20065"
              },
              {
                "name": "20060916 PHPQuiz Multiple Remote Vulnerabilites",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/446315/100/0/threaded"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-09-16T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the univers parameter in score.php and (2) the quiz_id parameter in home.php, accessed through the front/ URI."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-10-17T20:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "2376",
              "tags": [
                "exploit",
                "x_refsource_EXPLOIT-DB"
              ],
              "url": "https://www.exploit-db.com/exploits/2376"
            },
            {
              "name": "ADV-2006-3693",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/3693"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://www.morx.org/phpquiz.txt"
            },
            {
              "name": "1627",
              "tags": [
                "third-party-advisory",
                "x_refsource_SREASON"
              ],
              "url": "http://securityreason.com/securityalert/1627"
            },
            {
              "name": "22015",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/22015"
            },
            {
              "name": "phpquiz-score-sql-injection(28993)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28993"
            },
            {
              "name": "20065",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/20065"
            },
            {
              "name": "20060916 PHPQuiz Multiple Remote Vulnerabilites",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/446315/100/0/threaded"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-4978",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the univers parameter in score.php and (2) the quiz_id parameter in home.php, accessed through the front/ URI."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "2376",
                  "refsource": "EXPLOIT-DB",
                  "url": "https://www.exploit-db.com/exploits/2376"
                },
                {
                  "name": "ADV-2006-3693",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/3693"
                },
                {
                  "name": "http://www.morx.org/phpquiz.txt",
                  "refsource": "MISC",
                  "url": "http://www.morx.org/phpquiz.txt"
                },
                {
                  "name": "1627",
                  "refsource": "SREASON",
                  "url": "http://securityreason.com/securityalert/1627"
                },
                {
                  "name": "22015",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/22015"
                },
                {
                  "name": "phpquiz-score-sql-injection(28993)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28993"
                },
                {
                  "name": "20065",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/20065"
                },
                {
                  "name": "20060916 PHPQuiz Multiple Remote Vulnerabilites",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/446315/100/0/threaded"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-4978",
        "datePublished": "2006-09-25T01:00:00.000Z",
        "dateReserved": "2006-09-24T00:00:00.000Z",
        "dateUpdated": "2024-08-07T19:32:22.387Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }