Tecnick Tcexam
29 CVEs affecting Tecnick Tcexam. Latest disclosed: 2026-03-16. Critical: 1, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-47926 | Critical | 9.8 | 2024-12-30 | Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
CVE-2025-23176 | High | 8.8 | 2025-04-22 | CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
CVE-2024-47925 | High | 7.5 | 2024-12-30 | Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CVE-2021-20114 | High | 7.5 | 2021-07-30 | When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which include… |
CVE-2020-5745 | High | 7.4 | 2020-05-07 | Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a craf… |
CVE-2023-6554 | Medium | 6.5 | 2024-01-11 | When access to the "admin" folder is not protected by some external authorization mechanisms e.g. Apache Basic Auth, it is possible for any user to download pr… |
CVE-2025-23175 | Medium | 6.1 | 2025-04-22 | Multiple XSS (CWE-79) |
CVE-2021-20116 | Medium | 6.1 | 2021-08-05 | A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.4. The paths provided in the f, d, and dir parameters in tce_select_mediafile.php were… |
CVE-2021-20115 | Medium | 6.1 | 2021-08-05 | A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.3. The paths provided in the f, d, and dir parameters in tce_filemanager.php were not p… |
CVE-2020-5750 | Medium | 6.1 | 2020-05-07 | Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks via the se… |
CVE-2020-5748 | Medium | 6.1 | 2020-05-07 | Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks via the se… |
CVE-2018-13422 | Medium | 6.1 | 2018-07-07 | TCExam before 14.1.2 has XSS via an ff_ or xl_ field. |
CVE-2021-20112 | Medium | 5.4 | 2021-07-30 | A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1. Valid files uploaded via tce_select_mediafile.php with a filename beggining with a peri… |
CVE-2021-20111 | Medium | 5.4 | 2021-07-30 | A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1. Valid files uploaded via tce_filemanager.php with a filename beggining with a period wi… |
CVE-2020-5751 | Medium | 5.4 | 2020-05-07 | Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating… |
CVE-2020-5749 | Medium | 5.4 | 2020-05-07 | Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating… |
CVE-2020-5747 | Medium | 5.4 | 2020-05-07 | Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating… |
CVE-2020-5746 | Medium | 5.4 | 2020-05-07 | Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating… |
CVE-2021-20113 | Medium | 5.3 | 2021-07-30 | An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1. If a password reset request was made for an email address that was not registere… |
CVE-2020-5744 | Medium | 4.9 | 2020-05-07 | Relative Path Traversal in TCExam 14.2.2 allows a remote, authenticated attacker to read the contents of arbitrary files on disk. |