Vulnerabilities > Tecnick COM
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-12-10 | CVE-2007-6288 | SQL Injection vulnerability in Tecnick.Com Tcexam Multiple SQL injection vulnerabilities in TCExam before 5.1.000 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. | 7.5 |
| 2007-05-02 | CVE-2007-2431 | Cross-Site Scripting vulnerability in TCExam $_SERVER[] Dynamic variable evaluation vulnerability in shared/config/tce_config.php in TCExam 4.0.011 and earlier allows remote attackers to conduct cross-site scripting (XSS) and possibly other attacks by modifying critical variables such as $_SERVER, as demonstrated by injecting web script via the _SERVER[SCRIPT_NAME] parameter. network tecnick-com | 6.8 |
| 2007-05-02 | CVE-2007-2430 | Remote PHP Code Execution vulnerability in TCExam SessionUserLang shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by placing file contents and directory traversal manipulations into a SessionUserLang cookie to public/code/index.php. | 7.8 |