CVE-2006-4977

Name of the Vulnerable Software and Affected Versions PhpQuiz versions 1.2 and earlier

Description The issue allows remote attackers to upload arbitrary PHP code to the phpquiz/img quiz folder via the upload, ok update, image, and path parameters in the back/upload img.php and admin/upload img.php files. This might require directory traversal sequences in the path parameter.

Recommendations For PhpQuiz versions 1.2 and earlier, restrict access to the back/upload img.php and admin/upload img.php files to minimize the risk of exploitation. Avoid using the upload, ok update, image, and path parameters in these files until the issue is resolved. As a temporary workaround, consider disabling the file upload functionality in these files until a patch is available.