CVE-2006-0795

Absolute path traversal vulnerability in convert.cgi in Quirex 2.0.2 and earlier allows remote attackers to read arbitrary files, and possibly execute arbitrary code, via the (1) quiz_head, (2) quiz_foot, and (3) template variables.

• CWE-22

• http://evuln.com/vulns/78/summary.htmlVendor Advisory
• http://secunia.com/advisories/18926Vendor Advisory
• http://www.securityfocus.com/archive/1/426188/100/0/threaded
• http://www.securityfocus.com/bid/16709
• http://www.vupen.com/english/advisories/2006/0641Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24672
• http://evuln.com/vulns/78/summary.htmlVendor Advisory
• http://secunia.com/advisories/18926Vendor Advisory
• http://www.securityfocus.com/archive/1/426188/100/0/threaded
• http://www.securityfocus.com/bid/16709
• http://www.vupen.com/english/advisories/2006/0641Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24672

Published

Feb 19, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0789Certain unspecified Kyocera printers have a default "admin" …
• CVE-2006-0790Rockliffe MailSite 7.0 and earlier allows remote attackers t…
• CVE-2006-0791PHP remote file inclusion vulnerability in index.php in Drea…
• CVE-2006-0792Cross-site scripting (XSS) vulnerability in preferences.pers…
• CVE-2006-0793frameset.php in V-webmail 1.6.2 allows remote attackers to c…
• CVE-2006-0794help.php in V-webmail 1.6.2 allows remote attackers to obtai…
• CVE-2006-0796Cross-site scripting (XSS) vulnerability in default.php in C…
• CVE-2006-0797Nokia N70 cell phone allows remote attackers to cause a deni…
• CVE-2006-0798Multiple directory traversal vulnerabilities in the IMAP ser…
• CVE-2006-0799Microsoft Internet Explorer allows remote attackers to spoof…
• CVE-2006-0800Interpretation conflict in PostNuke 0.761 and earlier allows…
• CVE-2006-0801SQL injection vulnerability in the NS-Languages module for P…