TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4602)

Description

Multiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_users_popup.php in Nicola Asuni TCExam before 11.3.009 allow remote attackers to inject arbitrary web script or HTML via the (1) cid or (2) uids parameter.

Remediation

References

CVE-2012-4602

Related Vulnerabilities

WordPress Plugin Popup Modal For Youtube Cross-Site Scripting (1.0.1)

Squid Out-of-bounds Write Vulnerability (CVE-2019-18676)

WordPress Plugin School Management System-WPSchoolPress Multiple Cross-Site Scripting Vulnerabilities (2.1.16)

XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-37914)

jQuery UI Dialog Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41183)

Severity

Medium

Classification

CVE-2012-4602 CWE-707