CVE-2012-4602: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in admin/code/tceselectuserspopup.php in Nicola Asuni TCExam before 11.3.009 allow remote attackers to inject arbitrary web script or HTML via the 1 cid or 2 uids parameter...

CVE-2012-4238: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/code/tceeditanswer.php in TCExam before 11.3.008 allows remote authenticated users with level 5 or greater permissions to inject arbitrary web script or HTML via the questionsubjectid parameter...

PT-2012-5270

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 11.3.008 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with level 5 or greater permissions to inject arbitrary web script or HTML via the question subject id parameter in the...

CVE-2010-2153: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/code/tcefunctionstcecodeeditor.php in TCExam 10.1.006 and 10.1.007 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in cache/...

CVE-2006-5831: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter...