CVE-2006-4977: Undefined Security Weakness

Multiple unrestricted file upload vulnerabilities in 1 back/uploadimg.php and 2 admin/uploadimg.php in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to upload arbitrary PHP code to the phpquiz/imgquiz folder via the a upload, b okupdate, c image, and d path parameters, possibly...

phpQuiz 0.1.2 - SQL Injection / Code Execution

Title: PHPQuiz Download File phpquiz/imgquiz/ folder is by defaut writable so after uploading a simple phpshell we can lanche cmd from : http://localhost/phpquiz/...