← Database

CVE-2007-2430

HIGH CVSS: 7.8 Published: 2007-05-02 Modified: 2026-06-16

Description

shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by placing file contents and directory traversal manipulations into a SessionUserLang cookie to public/code/index.php.

Affected Platforms

Tecnick.Com Tcexam

Weakness Type

NVD-CWE-Other

References