Browse CVEs

MEDIUM 6.5 CVE-2023-6554 When access to the "admin" folder is not protected by some external authorization mechanisms e.g. Apache Basic Auth, it is possible for any user to d… Tcexam 15.1.0+ Fix from $1,6002024-01-11 MEDIUM 6.1 CVE-2021-20115 A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.3. The paths provided in the f, d, and dir parameters in tce_filemanager.php … Tcexam after 14.8.3 Fix from $1,6002021-08-05 MEDIUM 6.1 CVE-2021-20116 A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.4. The paths provided in the f, d, and dir parameters in tce_select_mediafile… Tcexam after 14.8.4 Fix from $1,6002021-08-05 HIGH 7.5 CVE-2021-20114EPSS 6% When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, whi… Tcexam after 14.8.1 Fix from $1,9502021-07-30 MEDIUM 5.4 CVE-2021-20111 A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1. Valid files uploaded via tce_filemanager.php with a filename beggining with a… Tcexam after 14.8.1 Fix from $1,6002021-07-30 MEDIUM 5.4 CVE-2021-20112 A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1. Valid files uploaded via tce_select_mediafile.php with a filename beggining w… Tcexam after 14.8.1 Fix from $1,6002021-07-30 MEDIUM 5.3 CVE-2021-20113 An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1. If a password reset request was made for an email address that was not… Tcexam after 14.8.1 Fix from $1,6002021-07-30 HIGH 7.4 CVE-2020-5745 Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive application actions by tricking legitimate users into click… Tcexam Patch available Fix from $1,9502020-05-07 MEDIUM 6.1 CVE-2020-5748 Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks … Tcexam Patch available Fix from $1,6002020-05-07 MEDIUM 6.1 CVE-2020-5750 Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks … Tcexam Patch available Fix from $1,6002020-05-07 MEDIUM 5.4 CVE-2020-5746 Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by… Tcexam Patch available Fix from $1,6002020-05-07 MEDIUM 5.4 CVE-2020-5747 Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by… Tcexam Patch available Fix from $1,6002020-05-07 MEDIUM 5.4 CVE-2020-5749 Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by… Tcexam Patch available Fix from $1,6002020-05-07 MEDIUM 5.4 CVE-2020-5751 Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by… Tcexam Patch available Fix from $1,6002020-05-07 CRITICAL 9.8 CVE-2018-17057EPSS 26% An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper. Tcpdf 3.16.0 / 6.2.22+ Fix from $2,3002018-09-14 MEDIUM 6.1 CVE-2018-13422 TCExam before 14.1.2 has XSS via an ff_ or xl_ field. Tcexam 14.1.2+ Fix from $1,6002018-07-07 MEDIUM 6.0 CVE-2012-4601 Multiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 allow remote authenticated users with level 5 or greater permissions to… Tcexam after 11.3.008 Fix from $1,6002012-11-23 MEDIUM 6.8 CVE-2012-4237 Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greater permissions to execute arbi… Tcexam after 11.3.007 Fix from $1,6002012-08-20 MEDIUM 5.0 CVE-2011-3806 TCExam 11.1.015 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in a… Tcexam Mitigation only Fix from $1,6002011-09-24 MEDIUM 6.8 CVE-2010-2153EPSS 7% Unrestricted file upload vulnerability in admin/code/tce_functions_tcecode_editor.php in TCExam 10.1.006 and 10.1.007 allows remote attackers to exec… Tcexam No fix yet Fix from $1,6002010-06-03 HIGH 7.5 CVE-2009-4747 PHP remote file inclusion vulnerability in public/code/cp_html2xhtmlbasic.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to … Aiocp No fix yet Fix from $1,9502010-03-26 HIGH 7.5 CVE-2009-3220 PHP remote file inclusion vulnerability in cp_html2txt.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute arbitrary P… Aiocp No fix yet Fix from $1,9502009-09-16