CVE-2012-4238

TCExam 11.3.007 Cross Site Scripting

Severity Score

2.1

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Cross-site scripting (XSS) vulnerability in admin/code/tce_edit_answer.php in TCExam before 11.3.008 allows remote authenticated users with level 5 or greater permissions to inject arbitrary web script or HTML via the question_subject_id parameter.

Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en admin/code/tce_edit_answer.php en TCExam anterior a v11.3.008 permite a usuarios autenticados con nivel 5 o permisos superiores, inyectar código web o HTML arbitrario a través del parámetro question_subject_id.

TCExam version 11.3.007 suffers from a cross site scripting vulnerability.

*Credits: N/A

CVSS Scores

NISTv2 2.1

Attack Vector

Network

Attack Complexity

High

Authentication

Single

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2012-08-09 CVE Reserved
2012-08-14 CVE Published
2024-09-16 CVE Updated
2024-09-16 First Exploit
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CAPEC

References (5)

URL	Tag	Source
http://freecode.com/projects/tcexam/releases/347125	X_refsource_confirm
http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam%3Bh=edf6e08622642f1b2421f4355d98250d9e1b0742	X_refsource_confirm

URL	Date	SRC
http://archives.neohapsis.com/archives/bugtraq/2012-08/0090.html	2024-09-16
http://www.reactionpenetrationtesting.co.uk/tcexam-cross-site-scripting.html	2024-09-16

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/50141	2023-11-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				<= 11.3.007 Search vendor "Tecnick" for product "Tcexam" and version " <= 11.3.007"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.000 Search vendor "Tecnick" for product "Tcexam" and version "10.1.000"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.001 Search vendor "Tecnick" for product "Tcexam" and version "10.1.001"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.002 Search vendor "Tecnick" for product "Tcexam" and version "10.1.002"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.003 Search vendor "Tecnick" for product "Tcexam" and version "10.1.003"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.004 Search vendor "Tecnick" for product "Tcexam" and version "10.1.004"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.005 Search vendor "Tecnick" for product "Tcexam" and version "10.1.005"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.006 Search vendor "Tecnick" for product "Tcexam" and version "10.1.006"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.007 Search vendor "Tecnick" for product "Tcexam" and version "10.1.007"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.008 Search vendor "Tecnick" for product "Tcexam" and version "10.1.008"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.009 Search vendor "Tecnick" for product "Tcexam" and version "10.1.009"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.010 Search vendor "Tecnick" for product "Tcexam" and version "10.1.010"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.011 Search vendor "Tecnick" for product "Tcexam" and version "10.1.011"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.012 Search vendor "Tecnick" for product "Tcexam" and version "10.1.012"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.013 Search vendor "Tecnick" for product "Tcexam" and version "10.1.013"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.000 Search vendor "Tecnick" for product "Tcexam" and version "11.0.000"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.001 Search vendor "Tecnick" for product "Tcexam" and version "11.0.001"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.002 Search vendor "Tecnick" for product "Tcexam" and version "11.0.002"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.003 Search vendor "Tecnick" for product "Tcexam" and version "11.0.003"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.004 Search vendor "Tecnick" for product "Tcexam" and version "11.0.004"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.005 Search vendor "Tecnick" for product "Tcexam" and version "11.0.005"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.006 Search vendor "Tecnick" for product "Tcexam" and version "11.0.006"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.007 Search vendor "Tecnick" for product "Tcexam" and version "11.0.007"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.008 Search vendor "Tecnick" for product "Tcexam" and version "11.0.008"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.009 Search vendor "Tecnick" for product "Tcexam" and version "11.0.009"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.010 Search vendor "Tecnick" for product "Tcexam" and version "11.0.010"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.011 Search vendor "Tecnick" for product "Tcexam" and version "11.0.011"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.012 Search vendor "Tecnick" for product "Tcexam" and version "11.0.012"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.013 Search vendor "Tecnick" for product "Tcexam" and version "11.0.013"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.014 Search vendor "Tecnick" for product "Tcexam" and version "11.0.014"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.015 Search vendor "Tecnick" for product "Tcexam" and version "11.0.015"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.016 Search vendor "Tecnick" for product "Tcexam" and version "11.0.016"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.000 Search vendor "Tecnick" for product "Tcexam" and version "11.1.000"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.001 Search vendor "Tecnick" for product "Tcexam" and version "11.1.001"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.002 Search vendor "Tecnick" for product "Tcexam" and version "11.1.002"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.003 Search vendor "Tecnick" for product "Tcexam" and version "11.1.003"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.004 Search vendor "Tecnick" for product "Tcexam" and version "11.1.004"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.005 Search vendor "Tecnick" for product "Tcexam" and version "11.1.005"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.006 Search vendor "Tecnick" for product "Tcexam" and version "11.1.006"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.007 Search vendor "Tecnick" for product "Tcexam" and version "11.1.007"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.008 Search vendor "Tecnick" for product "Tcexam" and version "11.1.008"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.009 Search vendor "Tecnick" for product "Tcexam" and version "11.1.009"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.010 Search vendor "Tecnick" for product "Tcexam" and version "11.1.010"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.011 Search vendor "Tecnick" for product "Tcexam" and version "11.1.011"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.012 Search vendor "Tecnick" for product "Tcexam" and version "11.1.012"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.013 Search vendor "Tecnick" for product "Tcexam" and version "11.1.013"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.014 Search vendor "Tecnick" for product "Tcexam" and version "11.1.014"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.015 Search vendor "Tecnick" for product "Tcexam" and version "11.1.015"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.016 Search vendor "Tecnick" for product "Tcexam" and version "11.1.016"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.017 Search vendor "Tecnick" for product "Tcexam" and version "11.1.017"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.018 Search vendor "Tecnick" for product "Tcexam" and version "11.1.018"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.019 Search vendor "Tecnick" for product "Tcexam" and version "11.1.019"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.020 Search vendor "Tecnick" for product "Tcexam" and version "11.1.020"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.021 Search vendor "Tecnick" for product "Tcexam" and version "11.1.021"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.022 Search vendor "Tecnick" for product "Tcexam" and version "11.1.022"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.023 Search vendor "Tecnick" for product "Tcexam" and version "11.1.023"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.024 Search vendor "Tecnick" for product "Tcexam" and version "11.1.024"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.025 Search vendor "Tecnick" for product "Tcexam" and version "11.1.025"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.026 Search vendor "Tecnick" for product "Tcexam" and version "11.1.026"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.027 Search vendor "Tecnick" for product "Tcexam" and version "11.1.027"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.028 Search vendor "Tecnick" for product "Tcexam" and version "11.1.028"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.029 Search vendor "Tecnick" for product "Tcexam" and version "11.1.029"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.030 Search vendor "Tecnick" for product "Tcexam" and version "11.1.030"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.031 Search vendor "Tecnick" for product "Tcexam" and version "11.1.031"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.000 Search vendor "Tecnick" for product "Tcexam" and version "11.2.000"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.001 Search vendor "Tecnick" for product "Tcexam" and version "11.2.001"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.002 Search vendor "Tecnick" for product "Tcexam" and version "11.2.002"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.003 Search vendor "Tecnick" for product "Tcexam" and version "11.2.003"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.004 Search vendor "Tecnick" for product "Tcexam" and version "11.2.004"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.005 Search vendor "Tecnick" for product "Tcexam" and version "11.2.005"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.006 Search vendor "Tecnick" for product "Tcexam" and version "11.2.006"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.007 Search vendor "Tecnick" for product "Tcexam" and version "11.2.007"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.008 Search vendor "Tecnick" for product "Tcexam" and version "11.2.008"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.010 Search vendor "Tecnick" for product "Tcexam" and version "11.2.010"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.011 Search vendor "Tecnick" for product "Tcexam" and version "11.2.011"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.012 Search vendor "Tecnick" for product "Tcexam" and version "11.2.012"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.013 Search vendor "Tecnick" for product "Tcexam" and version "11.2.013"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.014 Search vendor "Tecnick" for product "Tcexam" and version "11.2.014"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.015 Search vendor "Tecnick" for product "Tcexam" and version "11.2.015"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.016 Search vendor "Tecnick" for product "Tcexam" and version "11.2.016"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.017 Search vendor "Tecnick" for product "Tcexam" and version "11.2.017"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.018 Search vendor "Tecnick" for product "Tcexam" and version "11.2.018"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.020 Search vendor "Tecnick" for product "Tcexam" and version "11.2.020"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.021 Search vendor "Tecnick" for product "Tcexam" and version "11.2.021"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.022 Search vendor "Tecnick" for product "Tcexam" and version "11.2.022"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.023 Search vendor "Tecnick" for product "Tcexam" and version "11.2.023"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.025 Search vendor "Tecnick" for product "Tcexam" and version "11.2.025"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.026 Search vendor "Tecnick" for product "Tcexam" and version "11.2.026"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.027 Search vendor "Tecnick" for product "Tcexam" and version "11.2.027"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.028 Search vendor "Tecnick" for product "Tcexam" and version "11.2.028"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.029 Search vendor "Tecnick" for product "Tcexam" and version "11.2.029"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.030 Search vendor "Tecnick" for product "Tcexam" and version "11.2.030"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.031 Search vendor "Tecnick" for product "Tcexam" and version "11.2.031"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.032 Search vendor "Tecnick" for product "Tcexam" and version "11.2.032"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.3.000 Search vendor "Tecnick" for product "Tcexam" and version "11.3.000"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.3.001 Search vendor "Tecnick" for product "Tcexam" and version "11.3.001"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.3.002 Search vendor "Tecnick" for product "Tcexam" and version "11.3.002"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.3.003 Search vendor "Tecnick" for product "Tcexam" and version "11.3.003"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.3.004 Search vendor "Tecnick" for product "Tcexam" and version "11.3.004"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.3.005 Search vendor "Tecnick" for product "Tcexam" and version "11.3.005"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.3.006 Search vendor "Tecnick" for product "Tcexam" and version "11.3.006"		-		Affected