EUVD-2006-4964

Malware in sbrugna...

CVE-2006-4978

CVE-2006-4978 affects Walter Beschmout PhpQuiz 1.2 and earlier, with multiple SQL injection vulnerabilities. The weaknesses allow remote attackers to inject SQL via the univers parameter in score.php or the quiz_id parameter in home.php, accessed through the front/ URI. Documented impact is arbit...

CVE-2006-4979

The CVE-2006-4979 entry concerns a Direct static code injection vulnerability in cfgphpquiz/install.php for Walter Beschmout PhpQuiz 1.2 and earlier. The underlying flaw lets remote attackers inject arbitrary PHP code into config.inc.php by submitting modified configuration settings, enabling pot...