Vulnerabilities > CVE-2010-2153 - Unspecified vulnerability in Tecnick Tcexam 10.1.006/10.1.007

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
tecnick
exploit available
NVD
Published: 2010-06-03
Updated: 2024-11-21

Summary

Unrestricted file upload vulnerability in admin/code/tce_functions_tcecode_editor.php in TCExam 10.1.006 and 10.1.007 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in cache/.

Vulnerable Configurations

Part Description Count
Application
Tecnick
2

Exploit-Db

descriptionTCExam 10.1.7 'admin/code/tce_functions_tcecode_editor.php' Arbitrary File Upload Vulnerability. CVE-2010-2153. Webapps exploit for php platform
idEDB-ID:34073
last seen2016-02-03
modified2010-06-02
published2010-06-02
reporterJohn Leitch
sourcehttps://www.exploit-db.com/download/34073/
titleTCExam <= 10.1.7 - 'admin/code/tce_functions_tcecode_editor.php' Arbitrary File Upload Vulnerability

References