Search Results (22 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-5743 1 Tecnick 1 Tcexam 2024-11-21 4.3 Medium
Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker to access test metadata for which they don't have permission.
CVE-2018-13422 1 Tecnick 1 Tcexam 2024-11-21 N/A
TCExam before 14.1.2 has XSS via an ff_ or xl_ field.