CVE-2006-0795

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.96%

Published

Feb 19, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Absolute path traversal vulnerability in convert.cgi in Quirex 2.0.2 and earlier allows remote attackers to read arbitrary files, and possibly execute arbitrary code, via the (1) quiz_head, (2) quiz_foot, and (3) template variables.

Weaknesses (CWE)

CWE-22

Affected Products (2)

thomastsoi · quirexvulnerable

References (12)

http://evuln.com/vulns/78/summary.html

Vendor Advisory

http://secunia.com/advisories/18926

Vendor Advisory

http://www.securityfocus.com/archive/1/426188/100/0/threaded

http://www.securityfocus.com/bid/16709

http://www.vupen.com/english/advisories/2006/0641

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/24672

http://evuln.com/vulns/78/summary.html

Vendor Advisory

http://secunia.com/advisories/18926

Vendor Advisory

http://www.securityfocus.com/archive/1/426188/100/0/threaded

http://www.securityfocus.com/bid/16709

http://www.vupen.com/english/advisories/2006/0641

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/24672

KEV Catalog EPSS Scores Vendors All CVEs