CVE-2006-0795

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Absolute path traversal vulnerability in convert.cgi in Quirex 2.0.2 and earlier allows remote attackers to read arbitrary files, and possibly execute arbitrary code, via the (1) quiz_head, (2) quiz_foot, and (3) template variables.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://evuln.com/vulns/78/summary.htmlVendor Advisory
http://secunia.com/advisories/18926Vendor Advisory
http://www.securityfocus.com/archive/1/426188/100/0/threaded
http://www.securityfocus.com/bid/16709
http://www.vupen.com/english/advisories/2006/0641Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24672
http://evuln.com/vulns/78/summary.htmlVendor Advisory
http://secunia.com/advisories/18926Vendor Advisory
http://www.securityfocus.com/archive/1/426188/100/0/threaded
http://www.securityfocus.com/bid/16709
http://www.vupen.com/english/advisories/2006/0641Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24672

Timeline

Published: Feb 19, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-07964.3Cross-site scripting (XSS) vulnerability in default.php in Clever Copy 3.0 allows remote attackers to inject arbitrary web script or HTML vi CVE-2006-07977.8Nokia N70 cell phone allows remote attackers to cause a denial of service (reboot or shutdown) through a wireless Bluetooth connection via a CVE-2006-07985.5Multiple directory traversal vulnerabilities in the IMAP service in Macallan Mail Solution before 4.8.05.004 allow remote authenticated user CVE-2006-07994.0Microsoft Internet Explorer allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page CVE-2006-08002.6Interpretation conflict in PostNuke 0.761 and earlier allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML tags wi CVE-2006-08015.1SQL injection vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magic_quotes_gpc is off, allows remote attackers CVE-2006-08022.6Cross-site scripting (XSS) vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magic_quotes_gpc is enabled, allows CVE-2006-08035.0The signature verification functionality in the YaST Online Update (YOU) script handling relies on a gpg feature that is not intended for si CVE-2006-08047.5Off-by-one error in TIN 1.8.0 and earlier might allow attackers to execute arbitrary code via unknown vectors that trigger a buffer overflow CVE-2006-08057.5The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agen CVE-2006-08064.3Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to in CVE-2006-08075.1Stack-based buffer overflow in NJStar Chinese and Japanese Word Processor 4.x and 5.x before 5.10 allows user-assisted attackers to execute