İçeriğe atla
Noroxi

Tecnick kayıtları

tecnick üreticisine ait 26 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%7,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 20
  3. 21
  4. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

26 kayıt
  • CVE-2018-17057
    47Planlayın

    An issue was discovered in TCPDF before 6.2.22.

    KritikCVSS 9,8Kavram kanıtıEPSS %26

    tecnick · tcpdf14 Eyl 2018

  • CVE-2021-20114
    32İzleyin

    When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/ direc

    YüksekCVSS 7,5Kavram kanıtıEPSS %6

    tecnick · tcexam30 Tem 2021

  • CVE-2009-4747
    31İzleyin

    PHP remote file inclusion vulnerability in public/code/cp_html2xhtmlbasic.php in All In One Control Panel (AIOCP) 1.4.001 allows remote atta

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    tecnick · aiocp26 Mar 2010

  • CVE-2009-3220
    31İzleyin

    PHP remote file inclusion vulnerability in cp_html2txt.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute ar

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    tecnick · aiocp16 Eyl 2009

  • CVE-2010-2153
    29İzleyin

    Unrestricted file upload vulnerability in admin/code/tce_functions_tcecode_editor.php in TCExam 10.1.006 and 10.1.007 allows remote attacker

    OrtaCVSS 6,8Kavram kanıtıEPSS %7

    tecnick · tcexam3 Haz 2010

  • CVE-2020-5745
    29İzleyin

    Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive application actions by tricking legitimate users i

    YüksekCVSS 7,4İstismar yokEPSS %1

    tecnick · tcexam7 May 2020

  • CVE-2012-4237
    28İzleyin

    Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greater permissions to exe

    OrtaCVSS 6,8Kavram kanıtıEPSS %2

    tecnick · tcexam20 Ağu 2012

  • CVE-2023-6554
    26İzleyin

    Missing authorisation in TCExam

    OrtaCVSS 6,5İstismar yokEPSS %1

    tecnick · tcexam11 Oca 2024

  • CVE-2012-4601
    24İzleyin

    Multiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 allow remote authenticated users with level 5 or greater permi

    OrtaCVSS 6,0İstismar yokEPSS %2

    tecnick · tcexam23 Kas 2012

  • CVE-2020-5750
    24İzleyin

    Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS)

    OrtaCVSS 6,1İstismar yokEPSS %1

    tecnick · tcexam7 May 2020

  • CVE-2020-5748
    24İzleyin

    Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS)

    OrtaCVSS 6,1İstismar yokEPSS %1

    tecnick · tcexam7 May 2020

  • CVE-2021-20115
    24İzleyin

    A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.3.

    OrtaCVSS 6,1İstismar yokEPSS %1

    tecnick · tcexam5 Ağu 2021

  • CVE-2021-20116
    24İzleyin

    A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.4.

    OrtaCVSS 6,1İstismar yokEPSS %1

    tecnick · tcexam5 Ağu 2021

  • CVE-2018-13422
    24İzleyin

    TCExam before 14.1.2 has XSS via an ff_ or xl_ field.

    OrtaCVSS 6,1İstismar yokEPSS %1

    tecnick · tcexam7 Tem 2018

  • CVE-2021-20113
    21İzleyin

    An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1.

    OrtaCVSS 5,3İstismar yokEPSS %1

    tecnick · tcexam30 Tem 2021

  • CVE-2020-5747
    21İzleyin

    Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) a

    OrtaCVSS 5,4İstismar yokEPSS %1

    tecnick · tcexam7 May 2020

  • CVE-2020-5746
    21İzleyin

    Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) a

    OrtaCVSS 5,4İstismar yokEPSS %1

    tecnick · tcexam7 May 2020

  • CVE-2020-5749
    21İzleyin

    Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) a

    OrtaCVSS 5,4İstismar yokEPSS %1

    tecnick · tcexam7 May 2020

  • CVE-2020-5751
    21İzleyin

    Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) a

    OrtaCVSS 5,4İstismar yokEPSS %1

    tecnick · tcexam7 May 2020

  • CVE-2021-20112
    21İzleyin

    A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1.

    OrtaCVSS 5,4İstismar yokEPSS %1

    tecnick · tcexam30 Tem 2021

  • CVE-2021-20111
    21İzleyin

    A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1.

    OrtaCVSS 5,4İstismar yokEPSS %1

    tecnick · tcexam30 Tem 2021

  • CVE-2011-3806
    20İzleyin

    TCExam 11.1.015 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation

    OrtaCVSS 5,0İstismar yokEPSS %1

    tecnick · tcexam23 Eyl 2011

  • CVE-2020-5744
    19İzleyin

    Relative Path Traversal in TCExam 14.2.2 allows a remote, authenticated attacker to read the contents of arbitrary files on disk.

    OrtaCVSS 4,9İstismar yokEPSS %1

    tecnick · tcexam7 May 2020

  • CVE-2012-4602
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_users_popup.php in Nicola Asuni TCExam before 11.3.009 allow re

    OrtaCVSS 4,3İstismar yokEPSS %2

    tecnick · tcexam23 Kas 2012

  • CVE-2020-5743
    17İzleyin

    Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker to access test metadata for which they don

    OrtaCVSS 4,3İstismar yokEPSS %1

    tecnick · tcexam7 May 2020