| Package | Affected versions | Patched versions |
|---|---|---|
| tcexam | ≤ 4.0.011 |
shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by placing file contents and directory traversal manipulations into a SessionUserLang cookie to public/code/index.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free