NVD

Id
45678  
Name
CVE-2012-4237  
Description
Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the subject_module_id parameter to (1) tce_edit_answer.php or (2) tce_edit_question.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-20  
Modified Date
2012-09-11  
Seq
2012-4237  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
229289 45678 CVE-2012-4237 20120814 TCExam Edit SQL Injection  View
229290 45678 CVE-2012-4237 http://freecode.com/projects/tcexam/releases/347125  View
229291 45678 CVE-2012-4237 http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam;h=edf6e08622642f1b2421f4355d98250d9e1b0742  View
229292 45678 CVE-2012-4237 [oss-security] 20120813 TCExam Edit SQL Injection  View
229293 45678 CVE-2012-4237 http://www.reactionpenetrationtesting.co.uk/tcexam-sql-injection.html  View
229294 45678 CVE-2012-4237 54861  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28073 JVNDB-2012-003780 TCExam における SQL インジェクションの脆弱性 TCExam には、SQL インジェクションの脆弱性が存在します。 CVE-2012-4237 57475 CVE-2012-4237 45678 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003780.html 2012-08-06 2012-08-22 View