CVE-2010-2153
N/A
Published: June 3, 2010 at 04:00 PM UTC
Updated: June 16, 2026 at 11:20 PM UTC
1 product affected across 1 vendorTCExam
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 7%
Description
Unrestricted file upload vulnerability in admin/code/tce_functions_tcecode_editor.php in TCExam 10.1.006 and 10.1.007 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in cache/.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (6)
x_refsource_MISCExploit
Source: [email protected]
http://cross-site-scripting.blogspot.com/2010/06/tcexam-101006-arbitrary-upload.htmlThird Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/40011x_refsource_MISCExploit
Source: [email protected]
http://www.packetstormsecurity.org/1006-exploits/tcexam-shell.txtVDB Entryx_refsource_VUPENVendor Advisory
Source: [email protected]
http://www.vupen.com/english/advisories/2010/1329Quick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card