Vulnerabilities

TI-2007-05995 CVE-2007-6288 · GHSA-2hjv-5gg5-2v4c

Multiple SQL injection vulnerabilities in TCExam before 5.1.000 allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in TCExam before 5.1.000 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01063 Published 2007-12-10 No fix listed CWE-89

TI-2007-02348 CVE-2007-2431 · GHSA-x29q-pqw3-mf49

Dynamic variable evaluation vulnerability in shared/config/tce_config.php in TCExam…

LOW 38

Dynamic variable evaluation vulnerability in shared/config/tce_config.php in TCExam 4.0.011 and earlier allows remote attackers to conduct cross-site scripting (XSS) and possibly other attacks by modifying critical varia…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.05102 Published 2007-05-02 No fix listed

TI-2007-02347 CVE-2007-2430 · GHSA-fwv6-mh56-rxwc

shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create…

MEDIUM 40

shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by placing file contents and directory traversal manipulations into a SessionUserLang cookie to public…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.03702 Published 2007-05-02 No fix listed

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in TCExam before 5.1.000 allow remote attackers to…

Dynamic variable evaluation vulnerability in shared/config/tce_config.php in TCExam…

shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create…