CVE-2012-4601

Severity Score

6.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Multiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the (1) user_groups[] parameter to admin/code/tce_edit_test.php or (2) subject_id parameter to admin/code/tce_show_all_questions.php.

Multiples vulnerabilidades de inyección SQL en Nicola Asuni TCExam anterior a v11.3.009 permite a usuarios remotos autenticados con nivel 5 o mayores permisos, ejecutar comandos SQL de su elección a través del parámetro (1) user_groups[] para admin/code/tce_edit_test.php o (2) subject_id para admin/code/tce_show_all_questions.php.

*Credits: N/A

CVSS Scores

NISTv2 6.0

Attack Vector

Network

Attack Complexity

Medium

Authentication

Single

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2012-08-22 CVE Reserved
2012-11-23 CVE Published
2024-09-16 CVE Updated
2024-09-16 First Exploit
2024-10-19 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CAPEC

References (5)

URL	Tag	Source
http://freecode.com/projects/tcexam/releases/347588	X_refsource_confirm
http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam%3Ba=commit%3Bh=3e1ed3c02122eae182f076daabe903b0c8837971	X_refsource_confirm

URL	Date	SRC
https://www.htbridge.com/advisory/HTB23111	2024-09-16

URL	Date	SRC
http://sourceforge.net/projects/tcexam/files/CHANGELOG.TXT/view	2023-11-07

URL	Date	SRC
http://secunia.com/advisories/50539	2023-11-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				<= 11.3.008 Search vendor "Tecnick" for product "Tcexam" and version " <= 11.3.008"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.000 Search vendor "Tecnick" for product "Tcexam" and version "10.1.000"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.001 Search vendor "Tecnick" for product "Tcexam" and version "10.1.001"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.002 Search vendor "Tecnick" for product "Tcexam" and version "10.1.002"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.003 Search vendor "Tecnick" for product "Tcexam" and version "10.1.003"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.004 Search vendor "Tecnick" for product "Tcexam" and version "10.1.004"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.005 Search vendor "Tecnick" for product "Tcexam" and version "10.1.005"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.006 Search vendor "Tecnick" for product "Tcexam" and version "10.1.006"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.007 Search vendor "Tecnick" for product "Tcexam" and version "10.1.007"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.008 Search vendor "Tecnick" for product "Tcexam" and version "10.1.008"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.009 Search vendor "Tecnick" for product "Tcexam" and version "10.1.009"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.010 Search vendor "Tecnick" for product "Tcexam" and version "10.1.010"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.011 Search vendor "Tecnick" for product "Tcexam" and version "10.1.011"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.012 Search vendor "Tecnick" for product "Tcexam" and version "10.1.012"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				10.1.013 Search vendor "Tecnick" for product "Tcexam" and version "10.1.013"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.000 Search vendor "Tecnick" for product "Tcexam" and version "11.0.000"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.001 Search vendor "Tecnick" for product "Tcexam" and version "11.0.001"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.002 Search vendor "Tecnick" for product "Tcexam" and version "11.0.002"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.003 Search vendor "Tecnick" for product "Tcexam" and version "11.0.003"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.004 Search vendor "Tecnick" for product "Tcexam" and version "11.0.004"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.005 Search vendor "Tecnick" for product "Tcexam" and version "11.0.005"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.006 Search vendor "Tecnick" for product "Tcexam" and version "11.0.006"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.007 Search vendor "Tecnick" for product "Tcexam" and version "11.0.007"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.008 Search vendor "Tecnick" for product "Tcexam" and version "11.0.008"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.009 Search vendor "Tecnick" for product "Tcexam" and version "11.0.009"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.010 Search vendor "Tecnick" for product "Tcexam" and version "11.0.010"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.011 Search vendor "Tecnick" for product "Tcexam" and version "11.0.011"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.012 Search vendor "Tecnick" for product "Tcexam" and version "11.0.012"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.013 Search vendor "Tecnick" for product "Tcexam" and version "11.0.013"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.014 Search vendor "Tecnick" for product "Tcexam" and version "11.0.014"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.015 Search vendor "Tecnick" for product "Tcexam" and version "11.0.015"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.0.016 Search vendor "Tecnick" for product "Tcexam" and version "11.0.016"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.000 Search vendor "Tecnick" for product "Tcexam" and version "11.1.000"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.001 Search vendor "Tecnick" for product "Tcexam" and version "11.1.001"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.002 Search vendor "Tecnick" for product "Tcexam" and version "11.1.002"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.003 Search vendor "Tecnick" for product "Tcexam" and version "11.1.003"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.004 Search vendor "Tecnick" for product "Tcexam" and version "11.1.004"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.005 Search vendor "Tecnick" for product "Tcexam" and version "11.1.005"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.006 Search vendor "Tecnick" for product "Tcexam" and version "11.1.006"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.007 Search vendor "Tecnick" for product "Tcexam" and version "11.1.007"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.008 Search vendor "Tecnick" for product "Tcexam" and version "11.1.008"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.009 Search vendor "Tecnick" for product "Tcexam" and version "11.1.009"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.010 Search vendor "Tecnick" for product "Tcexam" and version "11.1.010"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.011 Search vendor "Tecnick" for product "Tcexam" and version "11.1.011"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.012 Search vendor "Tecnick" for product "Tcexam" and version "11.1.012"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.013 Search vendor "Tecnick" for product "Tcexam" and version "11.1.013"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.014 Search vendor "Tecnick" for product "Tcexam" and version "11.1.014"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.015 Search vendor "Tecnick" for product "Tcexam" and version "11.1.015"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.016 Search vendor "Tecnick" for product "Tcexam" and version "11.1.016"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.017 Search vendor "Tecnick" for product "Tcexam" and version "11.1.017"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.018 Search vendor "Tecnick" for product "Tcexam" and version "11.1.018"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.019 Search vendor "Tecnick" for product "Tcexam" and version "11.1.019"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.020 Search vendor "Tecnick" for product "Tcexam" and version "11.1.020"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.021 Search vendor "Tecnick" for product "Tcexam" and version "11.1.021"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.022 Search vendor "Tecnick" for product "Tcexam" and version "11.1.022"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.023 Search vendor "Tecnick" for product "Tcexam" and version "11.1.023"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.024 Search vendor "Tecnick" for product "Tcexam" and version "11.1.024"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.025 Search vendor "Tecnick" for product "Tcexam" and version "11.1.025"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.026 Search vendor "Tecnick" for product "Tcexam" and version "11.1.026"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.027 Search vendor "Tecnick" for product "Tcexam" and version "11.1.027"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.028 Search vendor "Tecnick" for product "Tcexam" and version "11.1.028"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.029 Search vendor "Tecnick" for product "Tcexam" and version "11.1.029"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.030 Search vendor "Tecnick" for product "Tcexam" and version "11.1.030"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.1.031 Search vendor "Tecnick" for product "Tcexam" and version "11.1.031"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.000 Search vendor "Tecnick" for product "Tcexam" and version "11.2.000"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.001 Search vendor "Tecnick" for product "Tcexam" and version "11.2.001"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.002 Search vendor "Tecnick" for product "Tcexam" and version "11.2.002"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.003 Search vendor "Tecnick" for product "Tcexam" and version "11.2.003"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.004 Search vendor "Tecnick" for product "Tcexam" and version "11.2.004"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.005 Search vendor "Tecnick" for product "Tcexam" and version "11.2.005"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.006 Search vendor "Tecnick" for product "Tcexam" and version "11.2.006"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.007 Search vendor "Tecnick" for product "Tcexam" and version "11.2.007"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.008 Search vendor "Tecnick" for product "Tcexam" and version "11.2.008"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.010 Search vendor "Tecnick" for product "Tcexam" and version "11.2.010"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.011 Search vendor "Tecnick" for product "Tcexam" and version "11.2.011"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.012 Search vendor "Tecnick" for product "Tcexam" and version "11.2.012"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.013 Search vendor "Tecnick" for product "Tcexam" and version "11.2.013"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.014 Search vendor "Tecnick" for product "Tcexam" and version "11.2.014"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.015 Search vendor "Tecnick" for product "Tcexam" and version "11.2.015"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.016 Search vendor "Tecnick" for product "Tcexam" and version "11.2.016"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.017 Search vendor "Tecnick" for product "Tcexam" and version "11.2.017"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.018 Search vendor "Tecnick" for product "Tcexam" and version "11.2.018"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.020 Search vendor "Tecnick" for product "Tcexam" and version "11.2.020"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.021 Search vendor "Tecnick" for product "Tcexam" and version "11.2.021"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.022 Search vendor "Tecnick" for product "Tcexam" and version "11.2.022"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.023 Search vendor "Tecnick" for product "Tcexam" and version "11.2.023"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.025 Search vendor "Tecnick" for product "Tcexam" and version "11.2.025"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.026 Search vendor "Tecnick" for product "Tcexam" and version "11.2.026"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.027 Search vendor "Tecnick" for product "Tcexam" and version "11.2.027"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.028 Search vendor "Tecnick" for product "Tcexam" and version "11.2.028"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.029 Search vendor "Tecnick" for product "Tcexam" and version "11.2.029"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.030 Search vendor "Tecnick" for product "Tcexam" and version "11.2.030"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.031 Search vendor "Tecnick" for product "Tcexam" and version "11.2.031"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.2.032 Search vendor "Tecnick" for product "Tcexam" and version "11.2.032"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.3.000 Search vendor "Tecnick" for product "Tcexam" and version "11.3.000"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.3.001 Search vendor "Tecnick" for product "Tcexam" and version "11.3.001"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.3.002 Search vendor "Tecnick" for product "Tcexam" and version "11.3.002"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.3.003 Search vendor "Tecnick" for product "Tcexam" and version "11.3.003"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.3.004 Search vendor "Tecnick" for product "Tcexam" and version "11.3.004"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.3.005 Search vendor "Tecnick" for product "Tcexam" and version "11.3.005"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.3.006 Search vendor "Tecnick" for product "Tcexam" and version "11.3.006"		-		Affected
Tecnick Search vendor "Tecnick"		Tcexam Search vendor "Tecnick" for product "Tcexam"				11.3.007 Search vendor "Tecnick" for product "Tcexam" and version "11.3.007"		-		Affected