PT-2012-5508

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 11.3.009 Description The issue allows remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands. This can be achieved via the user groups parameter to "admin/code/tce edit test.ph...