Vulnerabilities

TI-2024-32179 CVE-2024-47926 · GHSA-2pvv-x6hx-hgmv

Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

MEDIUM 50

Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00575 Published 2024-12-30 Fixed in Upgrade to version 16.3.5 CWE-89

TI-2024-32178 CVE-2024-47925 · GHSA-9xfw-qvx6-3jqx

LOW 39

Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00498 Published 2024-12-30 Fixed in Upgrade to version 16.3.5 CWE-79