CVE-2006-0628: Dale Ray Myquiz

High severity, CVSS 7.5. EPSS: 5.7% chance of exploitation in the next 30 days.

myquiz.pl in Dale Ray MyQuiz 1.01 allows remote attackers to execute arbitrary commands via shell metacharacters in the URL, which are not properly handled as part of the PATH_INFO environment variable.

Affected products

• Dale Ray Myquiz: version 1.01 only

Published 2006-02-10. Last modified 2026-06-16.