CVE-2012-4237
N/A
Published: August 20, 2012 at 08:00 PM UTC
Updated: June 16, 2026 at 11:44 PM UTC
1 product affected across 1 vendorTCExam
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the subject_module_id parameter to (1) tce_edit_answer.php or (2) tce_edit_question.php.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 11.3.00710.1.00010.1.00110.1.00210.1.00310.1.00410.1.00510.1.00610.1.00710.1.00810.1.00910.1.01010.1.01110.1.01210.1.01311.0.00011.0.00111.0.00211.0.00311.0.00411.0.00511.0.00611.0.00711.0.00811.0.00911.0.01011.0.01111.0.01211.0.01311.0.01411.0.01511.0.01611.1.00011.1.00111.1.00211.1.00311.1.00411.1.00511.1.00611.1.00711.1.00811.1.00911.1.01011.1.01111.1.01211.1.01311.1.01411.1.01511.1.01611.1.01711.1.01811.1.01911.1.02011.1.02111.1.02211.1.02311.1.02411.1.02511.1.02611.1.02711.1.02811.1.02911.1.03011.1.03111.2.00011.2.00111.2.00211.2.00311.2.00411.2.00511.2.00611.2.00711.2.00811.2.01011.2.01111.2.01211.2.01311.2.01411.2.01511.2.01611.2.01711.2.01811.2.02011.2.02111.2.02211.2.02311.2.02511.2.02611.2.02711.2.02811.2.02911.2.03011.2.03111.2.03211.3.00011.3.00111.3.00211.3.00311.3.00411.3.00511.3.006
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (7)
Mailing Listx_refsource_BUGTRAQExploit
Source: [email protected]
http://archives.neohapsis.com/archives/bugtraq/2012-08/0079.htmlThird Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/50141Mailing Listx_refsource_MLIST
Source: [email protected]
http://www.openwall.com/lists/oss-security/2012/08/13/8x_refsource_MISCExploit
Source: [email protected]
http://www.reactionpenetrationtesting.co.uk/tcexam-sql-injection.htmlQuick Info
StatusMODIFIED
CWE
CWE-89
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card