Back to Database
Status published
Low
CVE-2012-4238
Cross-site scripting (XSS) vulnerability in admin/code/tce_edit_answer.php in TCExam before 11.3.008...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in admin/code/tce_edit_answer.php in TCExam before 11.3.008 allows remote authenticated users with level 5 or greater permissions to inject arbitrary web script or HTML via the question_subject_id parameter.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-4238
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.reactionpenetrationtesting.co.uk/tcexam-cross-site-scripting.html
- http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam%3Bh=edf6e08622642f1b2421f4355d98250d9e1b0742
- http://secunia.com/advisories/50141
- http://freecode.com/projects/tcexam/releases/347125
- http://archives.neohapsis.com/archives/bugtraq/2012-08/0090.html
More from tecnick
View All →CVE-2024-56527
An issue was discovered in TCPDF before 6.8.0. The Error...
Unknown
0
CVE-2024-56522
An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses...
Unknown
0
CVE-2024-56521
An issue was discovered in TCPDF before 6.8.0. If libcurl...
Unknown
0
CVE-2024-56520
An issue was discovered in tc-lib-pdf-font before 2.6.4, as used...
Unknown
0
CVE-2024-56519
An issue was discovered in TCPDF before 6.8.0. setSVGStyles does...
Unknown
0
Affected Vendor
tecnick
View all reports →Affected Software
tcexam
Vulnerable Versions:
0, 10.1.000, 10.1.001, 10.1.002, 10.1.003, 10.1.004, 10.1.005, 10.1.006, 10.1.007, 10.1.008, 10.1.009, 10.1.010, 10.1.011, 10.1.012, 10.1.013, 11.0.000, 11.0.001, 11.0.002, 11.0.003, 11.0.004, 11.0.005, 11.0.006, 11.0.007, 11.0.008, 11.0.009, 11.0.010, 11.0.011, 11.0.012, 11.0.013, 11.0.014, 11.0.015, 11.0.016, 11.1.000, 11.1.001, 11.1.002, 11.1.003, 11.1.004, 11.1.005, 11.1.006, 11.1.007, 11.1.008, 11.1.009, 11.1.010, 11.1.011, 11.1.012, 11.1.013, 11.1.014, 11.1.015, 11.1.016, 11.1.017, 11.1.018, 11.1.019, 11.1.020, 11.1.021, 11.1.022, 11.1.023, 11.1.024, 11.1.025, 11.1.026, 11.1.027, 11.1.028, 11.1.029, 11.1.030, 11.1.031, 11.2.000, 11.2.001, 11.2.002, 11.2.003, 11.2.004, 11.2.005, 11.2.006, 11.2.007, 11.2.008, 11.2.010, 11.2.011, 11.2.012, 11.2.013, 11.2.014, 11.2.015, 11.2.016, 11.2.017, 11.2.018, 11.2.020, 11.2.021, 11.2.022, 11.2.023, 11.2.025, 11.2.026, 11.2.027, 11.2.028, 11.2.029, 11.2.030, 11.2.031, 11.2.032, 11.3.000, 11.3.001, 11.3.002, 11.3.003, 11.3.004, 11.3.005, 11.3.006
Timeline
Official Publish:
August 20th, 2012
Last Modified:
September 16th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.