Tecnick vulnerabilities

Products

• Tcexam 29
• Tcpdf 6
• Aiocp 2

Newest

• tecnick tcexam Tecnick TCExam XML Export tce_xml_users.php F_xml_export_users cross site scripting CVE-2026-4169 Disputed 4.8 MediumMarch 15, 2026
• tecnick tcexam Tecnick TCExam Group tce_edit_group.php cross site scripting CVE-2026-4168 Disputed 4.8 MediumMarch 15, 2026
• tecnick tcexam Tecnick – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2025-23176 8.8 HighApril 22, 2025
• tecnick tcexam Tecnick - Multiple XSS (CWE-79) CVE-2025-23175 6.1 MediumApril 22, 2025
• tecnick tcexam Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-47926 9.8 CriticalDecember 30, 2024
• tecnick tcexam Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-47925 7.5 HighDecember 30, 2024
• tcpdf project tcpdf TCPDF missing character escape on error messages CVE-2024-56527 Fix available 7.5 HighDecember 27, 2024
• tcpdf project tcpdf TCPDF has incorrect comparison CVE-2024-56522 Fix available 7.5 HighDecember 27, 2024
• tcpdf project tcpdf TCPDF missing certificate validation CVE-2024-56521 Fix available 9.8 CriticalDecember 27, 2024
• tecnick tcpdf tecnickcom/tc-lib-pdf-font mishandles fonts CVE-2024-56520 Fix available 7.3 HighDecember 27, 2024
• tcpdf project tcpdf TCPDF lacks SVG sanitization CVE-2024-56519 Fix available 7.5 HighDecember 27, 2024
• tecnick tcexam Missing authorisation in TCExam CVE-2023-6554 6.5 MediumJanuary 11, 2024
• tecnick tcexam A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.4. The paths provided in... CVE-2021-20116 6.1 MediumAugust 5, 2021
• tecnick tcexam A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.3. The paths provided in... CVE-2021-20115 6.1 MediumAugust 5, 2021
• tecnick tcexam When installed following the default/recommended settings, TCExam <= 14.8.1 allowed... CVE-2021-20114 7.5 HighJuly 29, 2021
• tecnick tcexam An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1. If a password... CVE-2021-20113 5.3 MediumJuly 29, 2021
• tecnick tcexam A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1. Valid files uploaded via... CVE-2021-20112 5.4 MediumJuly 29, 2021
• tecnick tcexam A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1. Valid files uploaded via... CVE-2021-20111 5.4 MediumJuly 29, 2021
• tecnick tcexam Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to... CVE-2020-5750 6.1 MediumMay 7, 2020
• tecnick tcexam Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to... CVE-2020-5749 5.4 MediumMay 7, 2020
• tecnick tcexam Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to... CVE-2020-5751 5.4 MediumMay 7, 2020
• tecnick tcexam Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to... CVE-2020-5748 6.1 MediumMay 7, 2020
• tecnick tcexam Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive... CVE-2020-5745 7.4 HighMay 7, 2020
• tecnick tcexam Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to... CVE-2020-5746 5.4 MediumMay 7, 2020
• tecnick tcexam Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker... CVE-2020-5743 4.3 MediumMay 7, 2020
• tecnick tcexam Relative Path Traversal in TCExam 14.2.2 allows a remote, authenticated attacker to read the... CVE-2020-5744 4.9 MediumMay 7, 2020
• tecnick tcexam Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to... CVE-2020-5747 5.4 MediumMay 7, 2020
• tecnick tcpdf, limesurvey +1 more TCPDF vulnerable to attackers triggering deserialization of arbitrary data CVE-2018-17057 Public exploitFix available EPSS 26.2% 9.8 CriticalSeptember 14, 2018
• tecnick tcexam TCExam before 14.1.2 has XSS via an ff_ or xl_ field. CVE-2018-13422 6.1 MediumJuly 7, 2018
• tecnick tcexam Multiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_users_popup.php in... CVE-2012-4602 4.3 MediumNovember 23, 2012
• tecnick tcexam Multiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 allow remote... CVE-2012-4601 6.0 MediumNovember 23, 2012
• tecnick tcexam Cross-site scripting (XSS) vulnerability in admin/code/tce_edit_answer.php in TCExam before 11.3... CVE-2012-4238 2.1 LowAugust 20, 2012
• tecnick tcexam Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users... CVE-2012-4237 Public exploit 6.8 MediumAugust 20, 2012
• tecnick tcexam TCExam 11.1.015 allows remote attackers to obtain sensitive information via a direct request to a... CVE-2011-3806 5.0 MediumSeptember 24, 2011
• tecnick tcexam Unrestricted file upload vulnerability in admin/code/tce_functions_tcecode_editor.php in TCExam... CVE-2010-2153 Public exploit 6.8 MediumJune 3, 2010
• tecnick aiocp PHP remote file inclusion vulnerability in public/code/cp_html2xhtmlbasic.php in All In One... CVE-2009-4747 Public exploit 7.5 HighMarch 26, 2010
• tecnick aiocp PHP remote file inclusion vulnerability in cp_html2txt.php in All In One Control Panel (AIOCP) 1... CVE-2009-3220 Public exploit 7.5 HighSeptember 16, 2009