Back to Database
Status published
Medium
CVE-2010-2153
Unrestricted file upload vulnerability in admin/code/tce_functions_tcecode_editor.php in TCExam 10.1.006 and...
Vulnerability Description
Unrestricted file upload vulnerability in admin/code/tce_functions_tcecode_editor.php in TCExam 10.1.006 and 10.1.007 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in cache/.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-2153
Credits & Attribution
No credits recorded in the NVD database.
References
More from tecnick
View All →CVE-2024-56527
An issue was discovered in TCPDF before 6.8.0. The Error...
Unknown
0
CVE-2024-56522
An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses...
Unknown
0
CVE-2024-56521
An issue was discovered in TCPDF before 6.8.0. If libcurl...
Unknown
0
CVE-2024-56520
An issue was discovered in tc-lib-pdf-font before 2.6.4, as used...
Unknown
0
CVE-2024-56519
An issue was discovered in TCPDF before 6.8.0. setSVGStyles does...
Unknown
0
Affected Vendor
tecnick
View all reports →Affected Software
tcexam
Vulnerable Versions:
10.1.006, 10.1.007
Timeline
Official Publish:
June 3rd, 2010
Last Modified:
September 16th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.