Tecnick

Records37All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

Tecnick records in CISA KEV

No Tecnick vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tcexam 23 records MEDIUM Aiocp 2 records LOW Tcpdf 1 record MEDIUM

Records

37 records

TI-2018-12189 CVE-2018-17057 · GHSA-5hw4-m7f3-hhx8

An issue was discovered in TCPDF before 6.2.22.

MEDIUM 64

An issue was discovered in TCPDF before 6.2.22.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.26172 Published 2018-09-14 Fixed in 6.2.22 CWE-502

TI-2026-03616 CVE-2026-4168 · GHSA-rmx4-2vrx-gx9h

Tecnick TCExam Group tce_edit_group.php cross site scripting

MEDIUM 55

A vulnerability was identified in Tecnick TCExam 16.5.0.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00284 Published 2026-03-15 No fix listed CWE-79

TI-2024-37408 CVE-2024-56521 · GHSA-9mgx-552f-59p6

Improper certificate validation in Tecnick tcpdf

MEDIUM 50

An issue was discovered in TCPDF before 6.8.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00785 Published 2024-12-27 Fixed in 6.8.0 CWE-295

TI-2024-32179 CVE-2024-47926 · GHSA-2pvv-x6hx-hgmv

Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

MEDIUM 50

Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00575 Published 2024-12-30 Fixed in Upgrade to version 16.3.5 CWE-89

TI-2021-03414 CVE-2021-20114 · GHSA-p6qm-652f-pc2j

When installed following the default/recommended settings, TCExam <= 14.8.1 allowed…

MEDIUM 42

When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which included sensitive database backup files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05973 Published 2021-07-29 No fix listed CWE-425

TI-2025-16961 CVE-2025-23176 · GHSA-388j-24wv-pfqq

Tecnick – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

MEDIUM 41

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0049 Published 2025-04-22 No fix listed CWE-89

TI-2024-37414 CVE-2024-56527 · GHSA-qx95-cwh6-9mvq

Cross-site scripting in Tecnick tcpdf

MEDIUM 40

An issue was discovered in TCPDF before 6.8.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00762 Published 2024-12-27 Fixed in 6.8.0 CWE-79

TI-2024-37409 CVE-2024-56522 · GHSA-w95c-7994-ghpr

Type confusion in Tecnick tcpdf

MEDIUM 40

An issue was discovered in TCPDF before 6.8.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00614 Published 2024-12-27 Fixed in 6.8.0 CWE-843

TI-2024-37406 CVE-2024-56519 · GHSA-4p8j-vhjm-6pvw

Cross-site scripting in Tecnick tcpdf

MEDIUM 40

An issue was discovered in TCPDF before 6.8.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00623 Published 2024-12-27 Fixed in 6.8.0 CWE-79

TI-2010-02065 CVE-2010-2153 · GHSA-2vhh-r779-6f4x

Unrestricted file upload vulnerability in admin/code/tce_functions_tcecode_editor.php in…

MEDIUM 40

Unrestricted file upload vulnerability in admin/code/tce_functions_tcecode_editor.php in TCExam 10.1.006 and 10.1.007 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, th…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.07472 Published 2010-06-03 No fix listed

TI-2024-37407 CVE-2024-56520 · GHSA-grhh-r4jj-8jh7

An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0…

LOW 39

An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00557 Published 2024-12-27 Fixed in 6.8.0, 2.6.4

TI-2024-32178 CVE-2024-47925 · GHSA-9xfw-qvx6-3jqx

Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

LOW 39

Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00498 Published 2024-12-30 Fixed in Upgrade to version 16.3.5 CWE-79

TI-2009-04503 CVE-2009-4747 · GHSA-5c5w-cwrc-57rp

PHP remote file inclusion vulnerability in public/code/cp_html2xhtmlbasic.php in All In…

LOW 38

PHP remote file inclusion vulnerability in public/code/cp_html2xhtmlbasic.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter, a different…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03043 Published 2010-03-26 No fix listed CWE-94

TI-2009-03065 CVE-2009-3220 · GHSA-x57m-fjm7-96hr

PHP remote file inclusion vulnerability in cp_html2txt.php in All In One Control Panel…

LOW 37

PHP remote file inclusion vulnerability in cp_html2txt.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02052 Published 2009-09-16 No fix listed CWE-94

TI-2012-03619 CVE-2012-4237 · GHSA-x7mx-6gx4-7548

Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote…

LOW 35

Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the subject_module_id parameter to (1) tce_edit_…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0239 Published 2012-08-20 No fix listed CWE-89

TI-2020-04673 CVE-2020-5745 · GHSA-7pq2-x2gr-qh8x

Cross-site request forgery in TCExam

LOW 34

Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00827 Published 2020-05-07 No fix listed CWE-352

TI-2023-06005 CVE-2023-6554 · GHSA-gwgh-999f-h6wf

Missing authorisation in TCExam

LOW 30

When access to the "admin" folder is not protected by some external authorization mechanisms e.g.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00581 Published 2024-01-11 Fixed in 15.1.0 CWE-862

TI-2020-04678 CVE-2020-5750 · GHSA-683v-gpq7-jpjg

Cross-site scripting in TCExam

LOW 30

Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks via the self-registration feature.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01141 Published 2020-05-07 No fix listed CWE-79

TI-2020-04676 CVE-2020-5748 · GHSA-jg88-2ggx-qcpg

Cross-site scripting in TCExam

LOW 30

Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks via the self-registration feature.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01132 Published 2020-05-07 No fix listed CWE-79

TI-2012-03941 CVE-2012-4601 · GHSA-h3g5-x76p-frj7

Multiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 allow…

LOW 30

Multiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the (1) user_groups[] parameter to…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01558 Published 2012-11-23 No fix listed CWE-89

TI-2021-03416 CVE-2021-20116 · GHSA-wghf-896v-rpqj

Cross-site scripting in TCExam

LOW 29

A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00937 Published 2021-08-05 No fix listed CWE-79

TI-2021-03415 CVE-2021-20115 · GHSA-qrj3-fx9c-4m4x

Cross-site scripting in TCExam

LOW 29

A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.3.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00947 Published 2021-08-05 No fix listed CWE-79

TI-2018-09657 CVE-2018-13422 · GHSA-hw9h-77p4-296j

TCExam before 14.1.2 has XSS via an ff_ or xl_ field.

LOW 29

TCExam before 14.1.2 has XSS via an ff_ or xl_ field.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00822 Published 2018-07-07 No fix listed CWE-79

TI-2025-16960 CVE-2025-23175 · GHSA-chhj-m9v4-rx7m

Tecnick - Multiple XSS (CWE-79)

LOW 27

Multiple XSS (CWE-79)

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00242 Published 2025-04-22 No fix listed CWE-79

TI-2021-03413 CVE-2021-20113 · GHSA-f452-fg56-fx5m

Observable discrepancy in TCExam

LOW 27

An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01299 Published 2021-07-29 No fix listed CWE-203

Open these records in search →