6.8
CVSSv2

CVE-2012-4237

Published: 20/08/2012 Updated: 07/11/2023
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 690
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple SQL injection vulnerabilities in TCExam prior to 11.3.008 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the subject_module_id parameter to (1) tce_edit_answer.php or (2) tce_edit_question.php.

Vulnerable Product Search on Vulmon Subscribe to Product

tecnick tcexam 11.1.019

tecnick tcexam 11.3.000

tecnick tcexam 10.1.013

tecnick tcexam 10.1.007

tecnick tcexam 11.2.016

tecnick tcexam 11.2.032

tecnick tcexam 11.2.005

tecnick tcexam 11.1.004

tecnick tcexam 11.1.021

tecnick tcexam 11.1.006

tecnick tcexam 10.1.005

tecnick tcexam 11.0.009

tecnick tcexam 11.0.016

tecnick tcexam 10.1.002

tecnick tcexam 10.1.011

tecnick tcexam 11.2.020

tecnick tcexam 11.2.000

tecnick tcexam 11.0.015

tecnick tcexam 11.2.003

tecnick tcexam 11.0.001

tecnick tcexam 11.2.010

tecnick tcexam 11.2.021

tecnick tcexam 11.1.007

tecnick tcexam 11.2.028

tecnick tcexam 10.1.012

tecnick tcexam 11.1.001

tecnick tcexam 11.1.028

tecnick tcexam 11.1.011

tecnick tcexam 11.0.003

tecnick tcexam 11.1.012

tecnick tcexam 11.1.013

tecnick tcexam 11.3.002

tecnick tcexam 11.2.007

tecnick tcexam 11.2.029

tecnick tcexam 11.0.012

tecnick tcexam 11.1.025

tecnick tcexam 11.2.015

tecnick tcexam 11.1.023

tecnick tcexam 11.0.011

tecnick tcexam 11.1.009

tecnick tcexam 10.1.004

tecnick tcexam 10.1.009

tecnick tcexam 11.0.004

tecnick tcexam 11.1.031

tecnick tcexam 11.0.010

tecnick tcexam 11.2.013

tecnick tcexam 11.1.010

tecnick tcexam 11.2.030

tecnick tcexam 10.1.003

tecnick tcexam 10.1.010

tecnick tcexam 11.0.008

tecnick tcexam 11.2.004

tecnick tcexam 11.1.003

tecnick tcexam 11.0.000

tecnick tcexam 11.2.002

tecnick tcexam 11.1.018

tecnick tcexam 11.1.022

tecnick tcexam 11.0.007

tecnick tcexam 11.1.000

tecnick tcexam 11.3.006

tecnick tcexam 11.1.017

tecnick tcexam 11.1.020

tecnick tcexam 11.0.006

tecnick tcexam 11.3.003

tecnick tcexam 11.1.026

tecnick tcexam 10.1.006

tecnick tcexam 11.2.022

tecnick tcexam 11.3.004

tecnick tcexam 11.1.016

tecnick tcexam 11.1.024

tecnick tcexam

tecnick tcexam 11.0.002

tecnick tcexam 10.1.000

tecnick tcexam 11.0.013

tecnick tcexam 11.2.025

tecnick tcexam 11.2.018

tecnick tcexam 11.2.027

tecnick tcexam 11.1.014

tecnick tcexam 11.2.017

tecnick tcexam 11.3.001

tecnick tcexam 11.0.005

tecnick tcexam 11.2.026

tecnick tcexam 11.1.002

tecnick tcexam 11.2.023

tecnick tcexam 10.1.001

tecnick tcexam 11.2.011

tecnick tcexam 11.1.027

tecnick tcexam 11.1.008

tecnick tcexam 11.2.012

tecnick tcexam 11.2.006

tecnick tcexam 11.3.005

tecnick tcexam 11.0.014

tecnick tcexam 11.2.014

tecnick tcexam 11.1.005

tecnick tcexam 11.2.031

tecnick tcexam 11.1.030

tecnick tcexam 11.1.029

tecnick tcexam 11.2.001

tecnick tcexam 11.1.015

tecnick tcexam 10.1.008

tecnick tcexam 11.2.008

Exploits

TCExam Edit version 113007 suffers from a remote SQL injection vulnerability ...
source: wwwsecurityfocuscom/bid/54861/info TCExam is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the ...
source: wwwsecurityfocuscom/bid/54861/info TCExam is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the u ...