CVE-2006-4978: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the univers parameter in score.php and 2 the quizid parameter in home.php, accessed through the front/ URI...

phpQuiz 0.1.2 - SQL Injection / Code Execution

Title: PHPQuiz Download File phpquiz/imgquiz/ folder is by defaut writable so after uploading a simple phpshell we can lanche cmd from : http://localhost/phpquiz/...