TC
Product
TCExam
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 16Low 2
Watch
Add TCExam to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-47926 | 9.8 | Dec 30 | Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affected: All versions before Upgrade to version 16.3.5 |
| CVE-2025-23176 | 8.8 | Apr 22 | Tecnick – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affected: 16.3.2 |
| CVE-2024-47925 | 7.5 | Dec 30 | Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affected: All versions before Upgrade to version 16.3.5 |
| CVE-2021-20114 | 7.5 | Jul 30 | When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which included sensitive database… Affected: through 14.8.1 |
| CVE-2020-5745 | 7.4 | May 7 | Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link Affected: 14.2.2 |
| CVE-2023-6554 | 6.5 | Jan 11 | Missing authorisation in TCExam Affected: before 15.1.0 |
| CVE-2025-23175 | 6.1 | Apr 22 | Tecnick - Multiple XSS (CWE-79) Affected: 16.3.2 |
| CVE-2021-20116 | 6.1 | Aug 5 | A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.4 Affected: through 14.8.4 |
| CVE-2021-20115 | 6.1 | Aug 5 | A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.3 Affected: through 14.8.3 |
| CVE-2020-5750 | 6.1 | May 7 | Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks via the self-registration… Affected: 14.2.2 |
| CVE-2020-5748 | 6.1 | May 7 | Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks via the self-registration… Affected: 14.2.2 |
| CVE-2018-13422 | 6.1 | Jul 7 | TCExam before 14.1.2 has XSS via an ff_ or xl_ field Affected: before 14.1.2 |
| CVE-2021-20112 | 5.4 | Jul 30 | A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1 Affected: through 14.8.1 |
| CVE-2021-20111 | 5.4 | Jul 30 | A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1 Affected: through 14.8.1 |
| CVE-2020-5751 | 5.4 | May 7 | Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted operator Affected: 14.2.2 |
| CVE-2020-5749 | 5.4 | May 7 | Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted group Affected: 14.2.2 |
| CVE-2020-5747 | 5.4 | May 7 | Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted test Affected: 14.2.2 |
| CVE-2020-5746 | 5.4 | May 7 | Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted test Affected: 14.2.2 |
| CVE-2021-20113 | 5.3 | Jul 30 | An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1 Affected: through 14.8.1 |
| CVE-2020-5744 | 4.9 | May 7 | Relative Path Traversal in TCExam 14.2.2 allows a remote, authenticated attacker to read the contents of arbitrary files on disk Affected: 14.2.2 |
| CVE-2020-5743 | 4.3 | May 7 | Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker to access test metadata for which they don't have permission Affected: 14.2.2 |
| CVE-2026-4169 | 2.4 | Mar 15 | Tecnick TCExam XML Export tce_xml_users.php F_xml_export_users cross site scripting Affected: 16.0; 16.1; 16.2; 16.3; 16.4; 16.5; +1 more |
| CVE-2026-4168 | 2.4 | Mar 15 | Tecnick TCExam Group tce_edit_group.php cross site scripting Affected: 16.5.0 |
| CVE-2012-4602 | – | Nov 23 | Multiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_users_popup.php in Nicola Asuni TCExam before 11.3.009 allow remote attackers to inject arbitrary web… Affected: through 11.3.008; 10.1.000; 10.1.001; 10.1.002; 10.1.003; 10.1.004; +34 more |
| CVE-2012-4601 | – | Nov 23 | Multiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL… Affected: through 11.3.008; 10.1.000; 10.1.001; 10.1.002; 10.1.003; 10.1.004; +34 more |
| CVE-2012-4238 | – | Aug 20 | Cross-site scripting (XSS) vulnerability in admin/code/tce_edit_answer.php in TCExam before 11.3.008 allows remote authenticated users with level 5 or greater permissions to… Affected: through 11.3.007; 10.1.000; 10.1.001; 10.1.002; 10.1.003; 10.1.004; +34 more |
| CVE-2012-4237 | – | Aug 20 | Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the… Affected: through 11.3.007; 10.1.000; 10.1.001; 10.1.002; 10.1.003; 10.1.004; +34 more |
| CVE-2011-3806 | – | Sep 24 | TCExam 11.1.015 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as… Affected: 11.1.015 |
| CVE-2010-2153 | – | Jun 3 | Unrestricted file upload vulnerability in admin/code/tce_functions_tcecode_editor.php in TCExam 10.1.006 and 10.1.007 allows remote attackers to execute arbitrary code by… Affected: 10.1.006; 10.1.007 |
Showing 29