CVE

Id
44737  
CVE No.
CVE-2010-2153  
Status
Candidate  
Description
Unrestricted file upload vulnerability in admin/code/tce_functions_tcecode_editor.php in TCExam 10.1.006 and 10.1.007 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in cache/.  
Phase
Assigned (20100603)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
487379 44737 CVE-2010-2153 MISC:http://cross-site-scripting.blogspot.com/2010/06/tcexam-101006-arbitrary-upload.html  View
487380 44737 CVE-2010-2153 MISC:http://www.packetstormsecurity.org/1006-exploits/tcexam-shell.txt  View
487381 44737 CVE-2010-2153 BID:40511  View
487382 44737 CVE-2010-2153 URL:http://www.securityfocus.com/bid/40511  View
487383 44737 CVE-2010-2153 OSVDB:65052  View
487384 44737 CVE-2010-2153 URL:http://osvdb.org/65052  View
487385 44737 CVE-2010-2153 SECUNIA:40011  View
487386 44737 CVE-2010-2153 URL:http://secunia.com/advisories/40011  View
487387 44737 CVE-2010-2153 VUPEN:ADV-2010-1329  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35963 JVNDB-2010-001743 Windows 上で稼働する CA ARCserve Backup における重要な情報を取得される脆弱性 Windows 上で稼働する CA ARCserve Backup には、重要な情報を取得される脆弱性が存在します。 CVE-2010-2157 44737 2.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001743.html  View