Security Advisory

CVE-2006-6629

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-12-18 11:00:00

Last updated 2024-08-07 20:33:59

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

lib/WeBWorK/PG/Translator.pm in WeBWorK Program Generation (PG) Language before 2.3.1 uses an insufficiently restrictive regular expression to determine valid macro filenames, which allows attackers to load arbitrary macro files whose names contain the strings (1) dangerousMacros.pl, (2) PG.pl, or (3) IO.pl.

← Browse all CVEs View on cve.org ↗