PT-2012-5270

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 11.3.008 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with level 5 or greater permissions to inject arbitrary web script or HTML via the question subject id parameter in the...

PT-2012-5269

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 11.3.008 Description The issue allows remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands. This can be achieved via the subject module id parameter to 1 "tce edit answer.php...