CVE-2006-2485

Name of the Vulnerable Software and Affected Versions Quezza versions 1.0 and earlier Quezza version 1.1.0

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the quezza root path parameter in the includes/class template.php file.

Recommendations For Quezza versions 1.0 and earlier, update to a version later than 1.0 to mitigate the risk. For Quezza version 1.1.0, avoid using the quezza root path parameter in the includes/class template.php file until the issue is resolved.