Unscored severity · published Dec 10, 2007
CVE-2007-6288
Multiple SQL injection vulnerabilities in TCExam before 5.1.000 allow remote attackers to execute arbitrary SQL commands via unspecified vectors
–
CVSS
1.1%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in TCExam before 5.1.000 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TC
Tcexam · Tecnick.com
through 5.1.000 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6288
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6288
Patch
http://secunia.com/advisories/27940
sourceforge.net
http://sourceforge.net/project/shownotes.php?release_id=559646&group_id=159398
www.securityfocus.com
http://www.securityfocus.com/bid/26760
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/38920
More from Tcexam
6.5
CVE-2023-6554
Missing authorisation in TCExam
–
CVE-2007-2430
shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by placing file contents and directory traversal…
–
CVE-2007-2431
Dynamic variable evaluation vulnerability in shared/config/tce_config.php in TCExam 4.0.011 and earlier allows remote attackers to conduct cross-site scripting (XSS) and possibly…