Description

Unrestricted file upload vulnerability in admin/code/tce_functions_tcecode_editor.php in TCExam 10.1.006 and 10.1.007 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in cache/.

Remediation

References

CVE-2010-2153

Related Vulnerabilities

Moodle Other Vulnerability (CVE-2006-5219)

Python Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-4616)

WordPress Plugin Media Library Categories 'termid' Parameter SQL Injection (1.0.6)

WordPress Plugin Booking Calendar Cross-Site Request Forgery (4.1.5)

Apache HTTP Server Other Vulnerability (CVE-2003-0016)

Severity

Medium

Classification

CVE-2010-2153

Tags

Missing Update Known Vulnerabilities