PT-2012-5508 · Tcexam · Tcexam

Published 2012-11-23 · Updated 2012-11-26 · CVE-2012-4601

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 11.3.009

Description The issue allows remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands. This can be achieved via the user groups[] parameter to "admin/code/tce edit test.php" or the subject id parameter to "admin/code/tce show all questions.php".

Recommendations For versions prior to 11.3.009, update to version 11.3.009 or later to resolve the issue. As a temporary workaround, consider restricting access to the "admin/code/tce edit test.php" and "admin/code/tce show all questions.php" endpoints for users with level 5 or greater permissions until the update is applied. Avoid using the user groups[] and subject id parameters in the affected API endpoints until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2012-4601

Affected Products

Tcexam

References · 7

• 🔥 https://htbridge.com/advisory/HTB23111 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-4601 · Security Note
• http://secunia.com/advisories/50539 · Vendor Advisory
• http://sourceforge.net/projects/tcexam/files/CHANGELOG.TXT/view · Patch
• http://freecode.com/projects/tcexam/releases/347588 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4601 · Note
• http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam%3Ba=commit%3Bh=3e1ed3c02122eae182f076daabe903b0c8837971 · Note