Description

Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the subject_module_id parameter to (1) tce_edit_answer.php or (2) tce_edit_question.php.

Remediation

References

CVE-2012-4237

Related Vulnerabilities

MySQL CVE-2016-0597 Vulnerability (CVE-2016-0597)

WordPress Plugin Ultimate GDPR & CCPA Compliance Toolkit for WordPress Security Bypass (2.4)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Security Bypass (2.1.2)

MySQL CVE-2013-2376 Vulnerability (CVE-2013-2376)

WordPress Plugin WP Customer Reviews Unspecified Vulnerability (3.0.7)

Severity

Medium

Classification

CVE-2012-4237 CWE-138

Tags

Missing Update Known Vulnerabilities