[eVuln] Quirex Arbitrary File Disclosure Vulnerability

New eVuln Advisory: Quirex Arbitrary File Disclosure Vulnerability http://evuln.com/vulns/78/summary.html --------------------Summary---------------- eVuln ID: EV0078 CVE: CVE-2006-0795 Software: Quirex Sowtware's Web Site: http://www.teca-scripts.com/ Versions: 2.0.2 2.0 and earlier Critical...

Path traversal

Absolute path traversal vulnerability in convert.cgi in Quirex 2.0.2 and earlier allows remote attackers to read arbitrary files, and possibly execute arbitrary code, via the 1 quizhead, 2 quizfoot, and 3 template variables...

CVE-2006-0795

CVE-2006-0795 affects Quirex convert.cgi (versions 2.0.2 and earlier). The vulnerability is an absolute path traversal via the quiz_head, quiz_foot, and template variables, allowing remote attackers to read arbitrary files and, per sources, possibly execute code. Exploit is reported as available,...

CVE-2006-0795: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in convert.cgi in Quirex 2.0.2 and earlier allows remote attackers to read arbitrary files, and possibly execute arbitrary code, via the 1 quizhead, 2 quizfoot, and 3 template variables...