CVEvulnerability
CVE-2012-4602
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-11-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_users_popup.php in Nicola Asuni TCExam before 11.3.009 allow remote attackers to inject arbitrary web script or HTML via the (1) cid or (2) uids parameter.
Affected configurations
• tecnick tcexam (<= 11.3.008)
• tecnick tcexam 10.1.000
• tecnick tcexam 10.1.001
• tecnick tcexam 10.1.002
• tecnick tcexam 10.1.003
• tecnick tcexam 10.1.004
• tecnick tcexam 10.1.005
• tecnick tcexam 10.1.006
• tecnick tcexam 10.1.007
• tecnick tcexam 10.1.008
• tecnick tcexam 10.1.009
• tecnick tcexam 10.1.010
• tecnick tcexam 10.1.011
• tecnick tcexam 10.1.012
• tecnick tcexam 10.1.013
• tecnick tcexam 11.0.000
• tecnick tcexam 11.0.001
• tecnick tcexam 11.0.002
• tecnick tcexam 11.0.003
• tecnick tcexam 11.0.004
• tecnick tcexam 11.0.005
• tecnick tcexam 11.0.006
• tecnick tcexam 11.0.007
• tecnick tcexam 11.0.008
• tecnick tcexam 11.0.009
• tecnick tcexam 11.0.010
• tecnick tcexam 11.0.011
• tecnick tcexam 11.0.012
• tecnick tcexam 11.0.013
• tecnick tcexam 11.0.014
• tecnick tcexam 11.0.015
• tecnick tcexam 11.0.016
• tecnick tcexam 11.1.000
• tecnick tcexam 11.1.001
• tecnick tcexam 11.1.002
• tecnick tcexam 11.1.003
• tecnick tcexam 11.1.004
• tecnick tcexam 11.1.005
• tecnick tcexam 11.1.006
• tecnick tcexam 11.1.007
• tecnick tcexam 11.1.008
• tecnick tcexam 11.1.009
• tecnick tcexam 11.1.010
• tecnick tcexam 11.1.011
• tecnick tcexam 11.1.012
• tecnick tcexam 11.1.013
• tecnick tcexam 11.1.014
• tecnick tcexam 11.1.015
• tecnick tcexam 11.1.016
• tecnick tcexam 11.1.017
• tecnick tcexam 11.1.018
• tecnick tcexam 11.1.019
• tecnick tcexam 11.1.020
• tecnick tcexam 11.1.021
• tecnick tcexam 11.1.022
• tecnick tcexam 11.1.023
• tecnick tcexam 11.1.024
• tecnick tcexam 11.1.025
• tecnick tcexam 11.1.026
• tecnick tcexam 11.1.027
… and 42 more
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://freecode.com/projects/tcexam/releases/347588 freecode.com
- http://secunia.com/advisories/50539 Vendor Advisory
- http://sourceforge.net/projects/tcexam/files/CHANGELOG.TXT/view sourceforge.net
- http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam%3Ba=commit%3Bh=3e1ed3c02122eae182f076daabe903b0c8837971 tcexam.git.sourceforge.net
- https://www.htbridge.com/advisory/HTB23111 www.htbridge.com
- http://freecode.com/projects/tcexam/releases/347588 freecode.com
- http://secunia.com/advisories/50539 Vendor Advisory
- http://sourceforge.net/projects/tcexam/files/CHANGELOG.TXT/view sourceforge.net
- http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam%3Ba=commit%3Bh=3e1ed3c02122eae182f076daabe903b0c8837971 tcexam.git.sourceforge.net
- https://www.htbridge.com/advisory/HTB23111 www.htbridge.com