CVE-2012-4238: XSS
First published: Mon Aug 20 2012(Updated: )
Cross-site scripting (XSS) vulnerability in admin/code/tce_edit_answer.php in TCExam before 11.3.008 allows remote authenticated users with level 5 or greater permissions to inject arbitrary web script or HTML via the question_subject_id parameter.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tecnick Tcexam | <=11.3.007 | |
| Tecnick Tcexam | =10.1.000 | |
| Tecnick Tcexam | =10.1.001 | |
| Tecnick Tcexam | =10.1.002 | |
| Tecnick Tcexam | =10.1.003 | |
| Tecnick Tcexam | =10.1.004 | |
| Tecnick Tcexam | =10.1.005 | |
| Tecnick Tcexam | =10.1.006 | |
| Tecnick Tcexam | =10.1.007 | |
| Tecnick Tcexam | =10.1.008 | |
| Tecnick Tcexam | =10.1.009 | |
| Tecnick Tcexam | =10.1.010 | |
| Tecnick Tcexam | =10.1.011 | |
| Tecnick Tcexam | =10.1.012 | |
| Tecnick Tcexam | =10.1.013 | |
| Tecnick Tcexam | =11.0.000 | |
| Tecnick Tcexam | =11.0.001 | |
| Tecnick Tcexam | =11.0.002 | |
| Tecnick Tcexam | =11.0.003 | |
| Tecnick Tcexam | =11.0.004 | |
| Tecnick Tcexam | =11.0.005 | |
| Tecnick Tcexam | =11.0.006 | |
| Tecnick Tcexam | =11.0.007 | |
| Tecnick Tcexam | =11.0.008 | |
| Tecnick Tcexam | =11.0.009 | |
| Tecnick Tcexam | =11.0.010 | |
| Tecnick Tcexam | =11.0.011 | |
| Tecnick Tcexam | =11.0.012 | |
| Tecnick Tcexam | =11.0.013 | |
| Tecnick Tcexam | =11.0.014 | |
| Tecnick Tcexam | =11.0.015 | |
| Tecnick Tcexam | =11.0.016 | |
| Tecnick Tcexam | =11.1.000 | |
| Tecnick Tcexam | =11.1.001 | |
| Tecnick Tcexam | =11.1.002 | |
| Tecnick Tcexam | =11.1.003 | |
| Tecnick Tcexam | =11.1.004 | |
| Tecnick Tcexam | =11.1.005 | |
| Tecnick Tcexam | =11.1.006 | |
| Tecnick Tcexam | =11.1.007 | |
| Tecnick Tcexam | =11.1.008 | |
| Tecnick Tcexam | =11.1.009 | |
| Tecnick Tcexam | =11.1.010 | |
| Tecnick Tcexam | =11.1.011 | |
| Tecnick Tcexam | =11.1.012 | |
| Tecnick Tcexam | =11.1.013 | |
| Tecnick Tcexam | =11.1.014 | |
| Tecnick Tcexam | =11.1.015 | |
| Tecnick Tcexam | =11.1.016 | |
| Tecnick Tcexam | =11.1.017 | |
| Tecnick Tcexam | =11.1.018 | |
| Tecnick Tcexam | =11.1.019 | |
| Tecnick Tcexam | =11.1.020 | |
| Tecnick Tcexam | =11.1.021 | |
| Tecnick Tcexam | =11.1.022 | |
| Tecnick Tcexam | =11.1.023 | |
| Tecnick Tcexam | =11.1.024 | |
| Tecnick Tcexam | =11.1.025 | |
| Tecnick Tcexam | =11.1.026 | |
| Tecnick Tcexam | =11.1.027 | |
| Tecnick Tcexam | =11.1.028 | |
| Tecnick Tcexam | =11.1.029 | |
| Tecnick Tcexam | =11.1.030 | |
| Tecnick Tcexam | =11.1.031 | |
| Tecnick Tcexam | =11.2.000 | |
| Tecnick Tcexam | =11.2.001 | |
| Tecnick Tcexam | =11.2.002 | |
| Tecnick Tcexam | =11.2.003 | |
| Tecnick Tcexam | =11.2.004 | |
| Tecnick Tcexam | =11.2.005 | |
| Tecnick Tcexam | =11.2.006 | |
| Tecnick Tcexam | =11.2.007 | |
| Tecnick Tcexam | =11.2.008 | |
| Tecnick Tcexam | =11.2.010 | |
| Tecnick Tcexam | =11.2.011 | |
| Tecnick Tcexam | =11.2.012 | |
| Tecnick Tcexam | =11.2.013 | |
| Tecnick Tcexam | =11.2.014 | |
| Tecnick Tcexam | =11.2.015 | |
| Tecnick Tcexam | =11.2.016 | |
| Tecnick Tcexam | =11.2.017 | |
| Tecnick Tcexam | =11.2.018 | |
| Tecnick Tcexam | =11.2.020 | |
| Tecnick Tcexam | =11.2.021 | |
| Tecnick Tcexam | =11.2.022 | |
| Tecnick Tcexam | =11.2.023 | |
| Tecnick Tcexam | =11.2.025 | |
| Tecnick Tcexam | =11.2.026 | |
| Tecnick Tcexam | =11.2.027 | |
| Tecnick Tcexam | =11.2.028 | |
| Tecnick Tcexam | =11.2.029 | |
| Tecnick Tcexam | =11.2.030 | |
| Tecnick Tcexam | =11.2.031 | |
| Tecnick Tcexam | =11.2.032 | |
| Tecnick Tcexam | =11.3.000 | |
| Tecnick Tcexam | =11.3.001 | |
| Tecnick Tcexam | =11.3.002 | |
| Tecnick Tcexam | =11.3.003 | |
| Tecnick Tcexam | =11.3.004 | |
| Tecnick Tcexam | =11.3.005 | |
| Tecnick Tcexam | =11.3.006 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://archives.neohapsis.com/archives/bugtraq/2012-08/0090.html
- http://freecode.com/projects/tcexam/releases/347125
- http://secunia.com/advisories/50141
- http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam;h=edf6e08622642f1b2421f4355d98250d9e1b0742
- http://www.reactionpenetrationtesting.co.uk/tcexam-cross-site-scripting.html
- http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam%3Bh=edf6e08622642f1b2421f4355d98250d9e1b0742
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/author
- agent/references
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/tecnick
- canonical/tecnick tcexam
- version/tecnick tcexam/11.3.007
- version/tecnick tcexam/10.1.000
- version/tecnick tcexam/10.1.001
- version/tecnick tcexam/10.1.002
- version/tecnick tcexam/10.1.003
- version/tecnick tcexam/10.1.004
- version/tecnick tcexam/10.1.005
- version/tecnick tcexam/10.1.006
- version/tecnick tcexam/10.1.007
- version/tecnick tcexam/10.1.008
- version/tecnick tcexam/10.1.009
- version/tecnick tcexam/10.1.010
- version/tecnick tcexam/10.1.011
- version/tecnick tcexam/10.1.012
- version/tecnick tcexam/10.1.013
- version/tecnick tcexam/11.0.000
- version/tecnick tcexam/11.0.001
- version/tecnick tcexam/11.0.002
- version/tecnick tcexam/11.0.003
- version/tecnick tcexam/11.0.004
- version/tecnick tcexam/11.0.005
- version/tecnick tcexam/11.0.006
- version/tecnick tcexam/11.0.007
- version/tecnick tcexam/11.0.008
- version/tecnick tcexam/11.0.009
- version/tecnick tcexam/11.0.010
- version/tecnick tcexam/11.0.011
- version/tecnick tcexam/11.0.012
- version/tecnick tcexam/11.0.013
- version/tecnick tcexam/11.0.014
- version/tecnick tcexam/11.0.015
- version/tecnick tcexam/11.0.016
- version/tecnick tcexam/11.1.000
- version/tecnick tcexam/11.1.001
- version/tecnick tcexam/11.1.002
- version/tecnick tcexam/11.1.003
- version/tecnick tcexam/11.1.004
- version/tecnick tcexam/11.1.005
- version/tecnick tcexam/11.1.006
- version/tecnick tcexam/11.1.007
- version/tecnick tcexam/11.1.008
- version/tecnick tcexam/11.1.009
- version/tecnick tcexam/11.1.010
- version/tecnick tcexam/11.1.011
- version/tecnick tcexam/11.1.012
- version/tecnick tcexam/11.1.013
- version/tecnick tcexam/11.1.014
- version/tecnick tcexam/11.1.015
- version/tecnick tcexam/11.1.016
- version/tecnick tcexam/11.1.017
- version/tecnick tcexam/11.1.018
- version/tecnick tcexam/11.1.019
- version/tecnick tcexam/11.1.020
- version/tecnick tcexam/11.1.021
- version/tecnick tcexam/11.1.022
- version/tecnick tcexam/11.1.023
- version/tecnick tcexam/11.1.024
- version/tecnick tcexam/11.1.025
- version/tecnick tcexam/11.1.026
- version/tecnick tcexam/11.1.027
- version/tecnick tcexam/11.1.028
- version/tecnick tcexam/11.1.029
- version/tecnick tcexam/11.1.030
- version/tecnick tcexam/11.1.031
- version/tecnick tcexam/11.2.000
- version/tecnick tcexam/11.2.001
- version/tecnick tcexam/11.2.002
- version/tecnick tcexam/11.2.003
- version/tecnick tcexam/11.2.004
- version/tecnick tcexam/11.2.005
- version/tecnick tcexam/11.2.006
- version/tecnick tcexam/11.2.007
- version/tecnick tcexam/11.2.008
- version/tecnick tcexam/11.2.010
- version/tecnick tcexam/11.2.011
- version/tecnick tcexam/11.2.012
- version/tecnick tcexam/11.2.013
- version/tecnick tcexam/11.2.014
- version/tecnick tcexam/11.2.015
- version/tecnick tcexam/11.2.016
- version/tecnick tcexam/11.2.017
- version/tecnick tcexam/11.2.018
- version/tecnick tcexam/11.2.020
- version/tecnick tcexam/11.2.021
- version/tecnick tcexam/11.2.022
- version/tecnick tcexam/11.2.023
- version/tecnick tcexam/11.2.025
- version/tecnick tcexam/11.2.026
- version/tecnick tcexam/11.2.027
- version/tecnick tcexam/11.2.028
- version/tecnick tcexam/11.2.029
- version/tecnick tcexam/11.2.030
- version/tecnick tcexam/11.2.031
- version/tecnick tcexam/11.2.032
- version/tecnick tcexam/11.3.000
- version/tecnick tcexam/11.3.001
- version/tecnick tcexam/11.3.002
- version/tecnick tcexam/11.3.003
- version/tecnick tcexam/11.3.004
- version/tecnick tcexam/11.3.005
- version/tecnick tcexam/11.3.006