When installed following the default/recommended settings, TCExam = 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which included sensitive database backup files...
7.5CVSS0.05973EPSS
SaveExploits1References1
OSV•added 2020/05/07 5:15 p.m.•13 views
CVE-2020-5744
Relative Path Traversal in TCExam 14.2.2 allows a remote, authenticated attacker to read the contents of arbitrary files on disk...
