CVE-2006-0795

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-02-19 · updated 2026-06-16
Weakness: CWE-22

Description

Absolute path traversal vulnerability in convert.cgi in Quirex 2.0.2 and earlier allows remote attackers to read arbitrary files, and possibly execute arbitrary code, via the (1) quiz_head, (2) quiz_foot, and (3) template variables.

Affected products

Thomastsoi Quirex: through 2.0.2; 2.0

References

http://evuln.com/vulns/78/summary.html
http://secunia.com/advisories/18926
http://www.securityfocus.com/archive/1/426188/100/0/threaded
http://www.securityfocus.com/bid/16709
http://www.vupen.com/english/advisories/2006/0641
https://exchange.xforce.ibmcloud.com/vulnerabilities/24672
http://evuln.com/vulns/78/summary.html
http://secunia.com/advisories/18926
http://www.securityfocus.com/archive/1/426188/100/0/threaded
http://www.securityfocus.com/bid/16709
http://www.vupen.com/english/advisories/2006/0641
https://exchange.xforce.ibmcloud.com/vulnerabilities/24672

Get alerted when CVE-2006-0795 or the next vulnerability affects your stack