Description

Multiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_users_popup.php in Nicola Asuni TCExam before 11.3.009 allow remote attackers to inject arbitrary web script or HTML via the (1) cid or (2) uids parameter.

Remediation

References

CVE-2012-4602

Related Vulnerabilities

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2165)

WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder CSV Injection (1.12.22)

Oracle Database Server CVE-2007-5520 Vulnerability (CVE-2007-5520)

Apache HTTP Server Other Vulnerability (CVE-2002-1593)

Oracle Database Server CVE-2010-0892 Vulnerability (CVE-2010-0892)

Severity

Medium

Classification

CVE-2012-4602 CWE-707

Tags

Missing Update Known Vulnerabilities