CVE-2023-6554

概要

参考情報

• cert.pl/en/posts/2024/01/CVE-2023-6554 · Third Party Advisory
• cert.pl/posts/2024/01/CVE-2023-6554 · Third Party Advisory
• tcexam.org · Product

tcexam のその他の脆弱性

• CVE-2021-20116中 6.1A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.4. The paths provided in the f, d, and dir parameters in tce_select_…
• CVE-2021-20115中 6.1A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.3. The paths provided in the f, d, and dir parameters in tce_fileman…
• CVE-2021-20114高 7.5When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/ direc…
• CVE-2021-20113中 5.3An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1. If a password reset request was made for an email address tha…
• CVE-2021-20112中 5.4A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1. Valid files uploaded via tce_select_mediafile.php with a filename be…