TI-2023-06005 CVE-2023-6554 · GHSA-gwgh-999f-h6wf
Missing authorisation in TCExam
Priority LOW 30
When access to the "admin" folder is not protected by some external authorization mechanisms e.g.
Vulnerabilities
4 records
TI-2007-05995 CVE-2007-6288 · GHSA-2hjv-5gg5-2v4c
Multiple SQL injection vulnerabilities in TCExam before 5.1.000 allow remote attackers to…
Priority LOW 35
Multiple SQL injection vulnerabilities in TCExam before 5.1.000 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
TI-2007-02348 CVE-2007-2431 · GHSA-x29q-pqw3-mf49
Dynamic variable evaluation vulnerability in shared/config/tce_config.php in TCExam…
Priority LOW 38
Dynamic variable evaluation vulnerability in shared/config/tce_config.php in TCExam 4.0.011 and earlier allows remote attackers to conduct cross-site scripting (XSS) and possibly other attacks by modifying critical varia…
TI-2007-02347 CVE-2007-2430 · GHSA-fwv6-mh56-rxwc
shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create…
Priority MEDIUM 40
shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by placing file contents and directory traversal manipulations into a SessionUserLang cookie to public…