CVE-2012-4601

Multiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the 1 usergroups parameter to admin/code/tceedittest.php or 2 subjectid parameter to...

Sql injection

Multiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the 1 usergroups parameter to admin/code/tceedittest.php or 2 subjectid parameter to...

CVE-2012-4601

CVE-2012-4601 affects Nicola Asuni TCExam before 11.3.009. The vulnerability is an SQL injection caused by improper sanitization of input in two parameters: the POST parameter user_groups[] to admin/code/tce_edit_test.php and the POST parameter subject_id to admin/code/tce_show_all_questions.php....

Sql injection

SQL injection vulnerability in shared/code/cpfunctionsdownloads.php in Nicola Asuni All In One Control Panel AIOCP before 1.3.009 allows remote attackers to execute arbitrary SQL commands via the downloadcategory parameter...

CVE-2007-0223

All In One Control Panel (AIOCP)