TCExam 11.2.011 Cross Site Scripting

TCExam =11.2.011 Multiple Cross-Site Scripting Vulnerabilities Vendor: Tecnik.com s.r.l. Product web page: http://www.tcexam.org Affected version: 11.2.009, 11.2.010 and 11.2.011 Summary: TCExam is a FLOSS system for electronic exams also know as CBA - Computer-Based Assessment, CBT -...

TCExam 11.2.011 SQL Injection

TCExam =11.2.011 Multiple SQL Injection Vulnerabilities Vendor: Tecnik.com s.r.l. Product web page: http://www.tcexam.org Affected version: 11.2.009, 11.2.010 and 11.2.011 Summary: TCExam is a FLOSS system for electronic exams also know as CBA - Computer-Based Assessment, CBT - Computer-Based...

TCExam 11.2.011 - Multiple SQL Injections

TCExam =11.2.011 Multiple SQL Injection Vulnerabilities Vendor: Tecnik.com s.r.l. Product web page: http://www.tcexam.org Affected version: 11.2.009, 11.2.010 and 11.2.011 Summary: TCExam is a FLOSS system for electronic exams also know as CBA - Computer-Based Assessment, CBT - Computer-Based...

TCExam 11.2.x - Multiple Cross-Site Scripting Vulnerabilities

TCExam 11.2.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48669/info TCExam is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

TCExam <=11.2.011 Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications TCExam =11.2.011 Multiple SQL Injection Vulnerabilities Vendor: Tecnik.com s.r.l. Product web page: http://www.tcexam.org Affected version: 11.2.009, 11.2.010 and 11.2.011 Summary: TCExam is a FLOSS system for electronic exams also know as CBA...

TCExam <=11.2.011 Multiple Cross-Site Scripting Vulnerabilities

Summary TCExam is a FLOSS system for electronic exams also know as CBA - Computer-Based Assessment, CBT - Computer-Based Testing or e-exam that enables educators and trainers to author, schedule, deliver, and report on quizzes, tests and exams. Description TCExam suffers from multiple pre and pos...

TCExam 11.2.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48669/info TCExam is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

TCExam 11.2.011 - Multiple SQL Injections

TCExam 11.2.011 - Multiple SQL Injections TCExam =11.2.011 Multiple SQL Injection Vulnerabilities Vendor: Tecnik.com s.r.l. Product web page: http://www.tcexam.org Affected version: 11.2.009, 11.2.010 and 11.2.011 Summary: TCExam is a FLOSS system for electronic exams also know as CBA -...

TCExam <=11.2.011 Multiple SQL Injection Vulnerabilities

Summary TCExam is a FLOSS system for electronic exams also know as CBA - Computer-Based Assessment, CBT - Computer-Based Testing or e-exam that enables educators and trainers to author, schedule, deliver, and report on quizzes, tests and exams. Description Input passed via multiple parameters to...

TCExam 11.1.029 SQL Injection

------------------------------------------------------------------------ Software................TCExam 11.1.029 Vulnerability...........SQL Injection Threat Level............Serious 3/5 Download................http://www.tcexam.org/ Discovery Date..........5/2/2011 Tested On...............Window...

TCExam 11.1.29 - tce_xml_user_results.php Multiple SQL Injections

TCExam 11.1.29 - tcexmluserresults.php Multiple SQL Injections source: https://www.securityfocus.com/bid/47762/info TCExam is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow...

TCExam 11.1.29 - 'tce_xml_user_results.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/47762/info TCExam is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify...

TCExam 11.1.16 - user_password Cross-Site Scripting

TCExam 11.1.16 - userpassword Cross-Site Scripting source: https://www.securityfocus.com/bid/46096/info TCExam is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

TCExam 11.1.16 - 'user_password' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46096/info TCExam is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

TCExam 11.1.016 Cross Site Scripting

------------------------------------------------------------------------ Software................TCExam 11.1.016 Vulnerability...........Reflected Cross-site Scripting Download................http://www.tcexam.org/ Release Date............1/31/2011 Tested On...............Windows 7 + XAMPP...

TCExam 'tce_functions_tcecode_editor.php' File Upload Vulnerability

This host is running TCExam and is prone to file upload vulnerability. OpenVAS Vulnerability Test $Id: gbtcexamfileuploadvuln.nasl 5843 2017-04-03 13:42:51Z cfi $ TCExam 'tcefunctionstcecodeeditor.php' File Upload Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks Gmb...

Tecnick TCExam < 10.1.012 File Upload Vulnerability - Active Check

Tecnick TCExam is prone to a file upload vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tecnick:tcexam";...

Tecnick TCExam Detection (HTTP)

HTTP based detection of Tecnick TCExam. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.800792";...

CVE-2010-2153

Unrestricted file upload vulnerability in admin/code/tcefunctionstcecodeeditor.php in TCExam 10.1.006 and 10.1.007 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in cache/...

Unrestricted file upload

Unrestricted file upload vulnerability in admin/code/tcefunctionstcecodeeditor.php in TCExam 10.1.006 and 10.1.007 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in cache/...