TCExam 11.2.x - admincodetce_edit_answer.php Multiple SQL Injections

TCExam 11.2.x - admincodetceeditanswer.php Multiple SQL Injections source: https://www.securityfocus.com/bid/54861/info TCExam is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful...

TCExam 11.2.x - '/admin/code/tce_edit_question.php?subject_module_id' SQL Injection

source: https://www.securityfocus.com/bid/54861/info TCExam is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access...

TCExam 11.2.x - '/admin/code/tce_edit_answer.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/54861/info TCExam is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access...

CVE-2011-3806

TCExam 11.1.015 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/code/tcepagefooter.php and certain other files...

Information disclosure

TCExam 11.1.015 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/code/tcepagefooter.php and certain other files...

CVE-2011-3806

TCExam 11.1.015 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/code/tcepagefooter.php and certain other files...

CVE-2011-3806

TCExam 11.1.015 is affected by an information-disclosure vulnerability: a remote attacker can trigger an error in a direct request to a PHP file (e.g., public/code/tce_page_footer.php) and obtain the installation path. This is documented across multiple sources (NVD/Red Hat/CVEs) and is described...

TCExam 11.2.011 Cross Site Scripting

TCExam =11.2.011 Multiple Cross-Site Scripting Vulnerabilities Vendor: Tecnik.com s.r.l. Product web page: http://www.tcexam.org Affected version: 11.2.009, 11.2.010 and 11.2.011 Summary: TCExam is a FLOSS system for electronic exams also know as CBA - Computer-Based Assessment, CBT -...

TCExam <=11.2.011 Multiple SQL Injection Vulnerabilities

No description provided by source. TCExam =11.2.011 Multiple SQL Injection Vulnerabilities Vendor: Tecnik.com s.r.l. Product web page: http://www.tcexam.org Affected version: 11.2.009, 11.2.010 and 11.2.011 Summary: TCExam is a FLOSS system for electronic exams also know as CBA - Computer-Based...

TCExam 11.2.011 SQL Injection

TCExam =11.2.011 Multiple SQL Injection Vulnerabilities Vendor: Tecnik.com s.r.l. Product web page: http://www.tcexam.org Affected version: 11.2.009, 11.2.010 and 11.2.011 Summary: TCExam is a FLOSS system for electronic exams also know as CBA - Computer-Based Assessment, CBT - Computer-Based...

TCExam 11.2.x - Multiple Cross-Site Scripting Vulnerabilities

TCExam 11.2.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48669/info TCExam is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

TCExam <=11.2.011 Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications TCExam =11.2.011 Multiple SQL Injection Vulnerabilities Vendor: Tecnik.com s.r.l. Product web page: http://www.tcexam.org Affected version: 11.2.009, 11.2.010 and 11.2.011 Summary: TCExam is a FLOSS system for electronic exams also know as CBA...

TCExam 11.2.011 - Multiple SQL Injections

TCExam 11.2.011 - Multiple SQL Injections TCExam =11.2.011 Multiple SQL Injection Vulnerabilities Vendor: Tecnik.com s.r.l. Product web page: http://www.tcexam.org Affected version: 11.2.009, 11.2.010 and 11.2.011 Summary: TCExam is a FLOSS system for electronic exams also know as CBA -...

TCExam <=11.2.011 Multiple SQL Injection Vulnerabilities

Summary TCExam is a FLOSS system for electronic exams also know as CBA - Computer-Based Assessment, CBT - Computer-Based Testing or e-exam that enables educators and trainers to author, schedule, deliver, and report on quizzes, tests and exams. Description Input passed via multiple parameters to...

TCExam <=11.2.011 Multiple Cross-Site Scripting Vulnerabilities

Summary TCExam is a FLOSS system for electronic exams also know as CBA - Computer-Based Assessment, CBT - Computer-Based Testing or e-exam that enables educators and trainers to author, schedule, deliver, and report on quizzes, tests and exams. Description TCExam suffers from multiple pre and pos...

TCExam 11.2.011 - Multiple SQL Injections

TCExam =11.2.011 Multiple SQL Injection Vulnerabilities Vendor: Tecnik.com s.r.l. Product web page: http://www.tcexam.org Affected version: 11.2.009, 11.2.010 and 11.2.011 Summary: TCExam is a FLOSS system for electronic exams also know as CBA - Computer-Based Assessment, CBT - Computer-Based...

TCExam 11.2.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48669/info TCExam is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

TCExam 11.1.029 SQL Injection

------------------------------------------------------------------------ Software................TCExam 11.1.029 Vulnerability...........SQL Injection Threat Level............Serious 3/5 Download................http://www.tcexam.org/ Discovery Date..........5/2/2011 Tested On...............Window...

TCExam 11.1.29 - tce_xml_user_results.php Multiple SQL Injections

TCExam 11.1.29 - tcexmluserresults.php Multiple SQL Injections source: https://www.securityfocus.com/bid/47762/info TCExam is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow...

TCExam 11.1.29 - 'tce_xml_user_results.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/47762/info TCExam is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify...