CVE-2006-4978
CVE-2006-4978 is a high-severity vulnerability in Walter Beschmout Phpquiz with a CVSS 2.0 base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: High (CVSS 2.0 base score 7.5)
- EPSS exploit prediction: 2% (76th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Walter Beschmout Phpquiz
- Published:
- Last modified:
Description
Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the univers parameter in score.php and (2) the quiz_id parameter in home.php, accessed through the front/ URI.
Frequently asked questions
- What is CVE-2006-4978?
- Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the univers parameter in score.php and (2) the quiz_id parameter in home.php, accessed through the front/ URI.
- How severe is CVE-2006-4978?
- CVE-2006-4978 has a CVSS 2.0 base score of 7.5, rated high severity.
- Is CVE-2006-4978 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (76th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2006-4978?
- CVE-2006-4978 affects Walter Beschmout Phpquiz. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2006-4978?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2006-4978 published?
- CVE-2006-4978 was published on 2006-09-25 and last updated on 2026-06-16.
References
- http://secunia.com/advisories/22015
- http://securityreason.com/securityalert/1627
- http://www.morx.org/phpquiz.txt
- http://www.securityfocus.com/archive/1/446315/100/0/threaded
- http://www.securityfocus.com/bid/20065
- http://www.vupen.com/english/advisories/2006/3693
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28993
- https://www.exploit-db.com/exploits/2376
Affected products (1)
- cpe:2.3:a:walter_beschmout:phpquiz:*:*:*:*:*:*:*:*
More vulnerabilities in Walter Beschmout Phpquiz
- CVE-2006-4979 — Medium (CVSS 5.0): Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows…
- CVE-2006-4977 — Medium (CVSS 5.0): Multiple unrestricted file upload vulnerabilities in (1) back/upload_img.php and (2) admin/upload_img.php in Walter…