Description
Directory traversal vulnerability in quiz.cgi for Mike Spice Quiz Me! before 0.6 allows remote attackers to write arbitrary files via .. (dot dot) sequences in the quiz parameter.
References
- 1003254 vdb-entry
- VU#318835 third-party-advisory
- 3857 vdb-entry
- quizme-gain-privileges(7970) vdb-entry