Sploitus

23 exploited vulnerabilities in Tcexam

Vulnerabilities with publicly known exploits

Vendors
Tcexam, Tecnick, Git
With known exploits
23
Affected Tecnick.com Tcexam versions
≤ 4.0.011
Affected Tecnick Tcexam versions
≤ 14.8.1, 14.2.2, 11.3.007, 10.1.000, 10.1.001, 10.1.002, 10.1.003, 10.1.004, 10.1.005, 10.1.006, 10.1.007, 10.1.008, 10.1.009, 10.1.010, 10.1.011, 10.1.012, 10.1.013, 11.0.000, 11.0.001, 11.0.002, 11.0.003, 11.0.004, 11.0.005, 11.0.006, 11.0.007, 11.0.008, 11.0.009, 11.0.010, 11.0.011, 11.0.012, 11.0.013, 11.0.014, 11.0.015, 11.0.016, 11.1.000, 11.1.001, 11.1.002, 11.1.003, 11.1.004, 11.1.005, 11.1.006, 11.1.007, 14.8.3, 14.8.4, 11.3.008

Vulnerabilities with exploits

Highest CVSS first — 5 of these already have exploit code on Sploitus

CVE-2007-2430 1 exploit
CVSS 7.8 HIGH 2007-05-02
TCExam 4.0.011 - 'SessionUserLang' Shell Injection
CVE-2021-20114
CVSS 7.5 HIGH 2021-07-29FIX AVAILABLE
CVE-2020-5745
CVSS 7.4 HIGH 2020-05-07FIX AVAILABLE
CVE-2012-4237 3 exploits
CVSS 6.8 MEDIUM 2012-08-20FIX AVAILABLE
TCExam 11.3.007 SQL InjectionTCExam 11.2.x - '/admin/code/tce_edit_answer.php' Multiple SQL Injections
CVE-2010-2153 1 exploit
CVSS 6.8 MEDIUM 2010-06-03FIX AVAILABLE
TCExam 10.1.7 - '/admin/code/tce_functions_tcecode_editor.php' Arbitrary File Upload
CVE-2007-2431 1 exploit
CVSS 6.8 MEDIUM 2007-05-02FIX AVAILABLE
TCExam 4.0.011 - 'SessionUserLang' Shell Injection
CVE-2021-20115
CVSS 6.1 MEDIUM 2021-07-21FIX AVAILABLE
CVE-2021-20116
CVSS 6.1 MEDIUM 2021-07-21FIX AVAILABLE
CVE-2020-5750
CVSS 6.1 MEDIUM 2020-05-07FIX AVAILABLE
CVE-2020-5748
CVSS 6.1 MEDIUM 2020-05-07FIX AVAILABLE
CVE-2012-4601
CVSS 6.0 MEDIUM 2012-11-23FIX AVAILABLE
CVE-2021-20111
CVSS 5.4 MEDIUM 2021-07-15FIX AVAILABLE
CVE-2021-20112
CVSS 5.4 MEDIUM 2021-07-15FIX AVAILABLE
CVE-2020-5751
CVSS 5.4 MEDIUM 2020-05-07FIX AVAILABLE
CVE-2020-5749
CVSS 5.4 MEDIUM 2020-05-07FIX AVAILABLE
CVE-2020-5747
CVSS 5.4 MEDIUM 2020-05-07FIX AVAILABLE
CVE-2020-5746
CVSS 5.4 MEDIUM 2020-05-07FIX AVAILABLE
CVE-2021-20113
CVSS 5.3 MEDIUM 2021-07-29
CVE-2020-5744
CVSS 4.9 MEDIUM 2020-05-07
CVE-2026-4169
CVSS 4.8 MEDIUM 2026-03-15FIX AVAILABLE
CVE-2020-5743
CVSS 4.3 MEDIUM 2020-05-07
CVE-2026-4168
CVSS 3.3 LOW 2026-03-15FIX AVAILABLE
CVE-2012-4238 1 exploit
CVSS 2.1 LOW 2012-08-20FIX AVAILABLE
TCExam 11.3.007 Cross Site Scripting