Show filters
31 Total Results
Displaying 21-30 of 31
Sort by:
Attacker Value
Unknown
CVE-2012-4601
Disclosure Date: November 23, 2012 (last updated October 05, 2023)
Multiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the (1) user_groups[] parameter to admin/code/tce_edit_test.php or (2) subject_id parameter to admin/code/tce_show_all_questions.php.
0
Attacker Value
Unknown
CVE-2012-4602
Disclosure Date: November 23, 2012 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_users_popup.php in Nicola Asuni TCExam before 11.3.009 allow remote attackers to inject arbitrary web script or HTML via the (1) cid or (2) uids parameter.
0
Attacker Value
Unknown
CVE-2012-4237
Disclosure Date: August 20, 2012 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the subject_module_id parameter to (1) tce_edit_answer.php or (2) tce_edit_question.php.
0
Attacker Value
Unknown
CVE-2012-4238
Disclosure Date: August 20, 2012 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in admin/code/tce_edit_answer.php in TCExam before 11.3.008 allows remote authenticated users with level 5 or greater permissions to inject arbitrary web script or HTML via the question_subject_id parameter.
0
Attacker Value
Unknown
CVE-2011-3806
Disclosure Date: September 24, 2011 (last updated October 04, 2023)
TCExam 11.1.015 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/code/tce_page_footer.php and certain other files.
0
Attacker Value
Unknown
CVE-2010-2153
Disclosure Date: June 03, 2010 (last updated October 04, 2023)
Unrestricted file upload vulnerability in admin/code/tce_functions_tcecode_editor.php in TCExam 10.1.006 and 10.1.007 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in cache/.
0
Attacker Value
Unknown
CVE-2009-4747
Disclosure Date: March 26, 2010 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in public/code/cp_html2xhtmlbasic.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter, a different vector than CVE-2009-3220.
0
Attacker Value
Unknown
CVE-2009-3220
Disclosure Date: September 16, 2009 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in cp_html2txt.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
0
Attacker Value
Unknown
CVE-2007-6288
Disclosure Date: December 10, 2007 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in TCExam before 5.1.000 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
0
Attacker Value
Unknown
CVE-2007-2430
Disclosure Date: May 02, 2007 (last updated October 04, 2023)
shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by placing file contents and directory traversal manipulations into a SessionUserLang cookie to public/code/index.php.
0
