Description

Unrestricted file upload vulnerability in admin/code/tce_functions_tcecode_editor.php in TCExam 10.1.006 and 10.1.007 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in cache/.

Remediation

References

CVE-2010-2153

Related Vulnerabilities

WordPress Plugin WooCommerce Cross-Site Scripting (2.6.3)

Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3226)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43734)

Apache HTTP Server Other Vulnerability (CVE-2003-0083)

MySQL CVE-2019-2507 Vulnerability (CVE-2019-2507)

Severity

Medium

Classification

CVE-2010-2153

Tags

Missing Update Known Vulnerabilities