CVE-2010-2153

概要

参考情報

• cross-site-scripting.blogspot.com/2010/06/tcexam-101006-arbitrary-upload.html · Exploit
• osvdb.org/65052
• secunia.com/advisories/40011 · Vendor Advisory
• packetstormsecurity.org/1006-exploits/tcexam-shell.txt · Exploit
• securityfocus.com/bid/40511 · Exploit
• vupen.com/english/advisories/2010/1329 · Vendor Advisory

tcexam のその他の脆弱性

• CVE-2023-6554中 6.5When access to the "admin" folder is not protected by some external authorization mechanisms e.g. Apache Basic Auth, it is possible for any …
• CVE-2021-20116中 6.1A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.4. The paths provided in the f, d, and dir parameters in tce_select_…
• CVE-2021-20115中 6.1A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.3. The paths provided in the f, d, and dir parameters in tce_fileman…
• CVE-2021-20114高 7.5When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/ direc…
• CVE-2021-20113中 5.3An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1. If a password reset request was made for an email address tha…