CVE-2012-4602 in TCExam

Resumen (Inglés)

Multiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_users_popup.php in Nicola Asuni TCExam before 11.3.009 allow remote attackers to inject arbitrary web script or HTML via the (1) cid or (2) uids parameter.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2012-08-22

Divulgación

2012-11-23

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
63031	Tecnick TCExam secuencias de comandos en sitios cruzados	79	No está definido	Arreglo oficial	CVE-2012-4602

Fuentes

• MITRE
• NVD
• CVE Details