CVE-2012-4601

Multiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the 1 usergroups parameter to admin/code/tceedittest.php or 2 subjectid parameter to...

CVE-2018-13422

TCExam before 14.1.2 has XSS via an ff or xl field...

CVE-2010-2153

Unrestricted file upload vulnerability in admin/code/tcefunctionstcecodeeditor.php in TCExam 10.1.006 and 10.1.007 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in cache/...

CVE-2012-4238

Cross-site scripting XSS vulnerability in admin/code/tceeditanswer.php in TCExam before 11.3.008 allows remote authenticated users with level 5 or greater permissions to inject arbitrary web script or HTML via the questionsubjectid parameter...

CVE-2011-3806

TCExam 11.1.015 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/code/tcepagefooter.php and certain other files...

Tecnick TCExam SQL注入漏洞

Tecnick TCExam is a web-based open source e-exam system from Tecnick UK. The system is mainly used for online exams and so on. A SQL injection vulnerability exists in Tecnick TCExam version 16.3.2, which stems from improper neutralization of special elements in SQL commands, and could lead to SQL...

Tecnick TCExam 跨站脚本漏洞

Tecnick TCExam is a Web-based open source e-exam system from the UK company Tecnick. The system is mainly used for online exams, etc. A cross-site scripting vulnerability exists in Tecnick TCExam version 16.3.2, which stems from vulnerability to multiple cross-site scripting attacks...

PT-2025-17538 · Tecnick · Tcexam

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves Multiple XSS CWE-79, which is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized acce...

CVE-2024-47925

Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-47926

Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...

CVE-2024-47926 Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...

CVE-2024-47926

Tecnick TCExam is affected by a SQL Injection (CWE-89) due to improper neutralization of special elements in SQL commands. The CVE-2024-47926 entry indicates a high-impact vulnerability with CVSS v3.1 base score 9.8 (Network attack vector, low complexity, no privileges required, user interaction ...

CVE-2024-47926 Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...

CVE-2024-47925 Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-47925 Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-47925

CVE-2024-47925 concerns Tecnick TCExam, with a Cross-site Scripting (CWE-79) vulnerability arising from improper input neutralization during web page generation. Reports from NVD/CVELIST/CIRCL and vendor pages confirm impact as high on confidentiality (CWEs indicate XSS) and a network-attack surf...

Tecnick TCExam SQL注入漏洞

Tecnick TCExam is a Web-based open source e-exam system from Tecnick UK. The system is mainly used for online exams, etc. Element is a Matrix web collaboration client of Element open source. Tecnick TCExam suffers from a SQL injection vulnerability that stems from the improper neutralization of...

Tecnick TCExam 跨站脚本漏洞

Tecnick TCExam is a Web-based open source e-exam system from the UK company Tecnick. The system is mainly used for online exams and so on. Tecnick TCExam suffers from a cross-site scripting vulnerability that originates from improper input neutralization during web page generation, resulting in a...

PT-2024-32902 · Tecnick · Tcexam

Name of the Vulnerable Software and Affected Versions: Tecnick TCExam affected versions not specified Description: The issue is related to improper neutralization of special elements used in an SQL command, also known as SQL Injection. This occurs because special elements in an SQL command are no...

PT-2024-32901 · Tecnick · Tcexam

Name of the Vulnerable Software and Affected Versions: Tecnick TCExam affected versions not specified Description: The issue is related to Cross-site Scripting XSS due to improper neutralization of input during web page generation. This can lead to the execution of malicious scripts on the...