VULNERABILITY INTELLIGENCE

CVE-2006-4979

CVSS score5 MEDIUM
EPSS probability2.76%
CISA KEVNot currently listed
Published2006-09-25
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows remote attackers to inject arbitrary PHP code in config.inc.php via modified configuration settings.

Primary references