Description

Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the subject_module_id parameter to (1) tce_edit_answer.php or (2) tce_edit_question.php.

Remediation

References

CVE-2012-4237

Related Vulnerabilities

WordPress Plugin MyBookTable Bookstore by Author Media Unspecified Vulnerability (2.1.4)

Oracle JRE CVE-2022-21291 Vulnerability (CVE-2022-21291)

Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20232)

Moodle Cryptographic Issues Vulnerability (CVE-2009-4302)

WordPress Plugin Fast Secure Contact Form 'index.php' Cross-Site Scripting (3.0.3.1)

Severity

Medium

Classification

CVE-2012-4237 CWE-138

Tags

Missing Update Known Vulnerabilities