CVE-2007-2430

Published: May 2, 2007Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by placing file contents and directory traversal manipulations into a SessionUserLang cookie to public/code/index.php.

Affected (1)

Products: Tecnick.com: Tcexam

Tecnick.com

1 product

Tcexam

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Tecnick.com Tcexam	Up to 4.0.011

References (14)

http://secunia.com/advisories/25008

Source: cve@mitre.org

http://sourceforge.net/forum/forum.php?forum_id=690912

Source: cve@mitre.org

Patch

http://www.attrition.org/pipermail/vim/2007-May/001571.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/23705

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1583

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/33958

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3816

Source: cve@mitre.org

http://secunia.com/advisories/25008