CVE-2012-4602
UnknownEPSS 1.79%
Last modified
CVE-2012-4602 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_users_popup.php in Nicola Asuni TCExam before 11.3.009 allow remote attackers to inject arbitrary web script or HTML via the (1) cid or (2) uids parameter.. EPSS estimates a 1.79% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_users_popup.php in Nicola Asuni TCExam before 11.3.009 allow remote attackers to inject arbitrary web script or HTML via the (1) cid or (2) uids parameter.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Tecnick | Tcexam | <= 11.3.008 |
| Tecnick | Tcexam | 10.1.000 |
| Tecnick | Tcexam | 10.1.001 |
| Tecnick | Tcexam | 10.1.002 |
| Tecnick | Tcexam | 10.1.003 |
| Tecnick | Tcexam | 10.1.004 |
| Tecnick | Tcexam | 10.1.005 |
| Tecnick | Tcexam | 10.1.006 |
| Tecnick | Tcexam | 10.1.007 |
| Tecnick | Tcexam | 10.1.008 |
| Tecnick | Tcexam | 10.1.009 |
| Tecnick | Tcexam | 10.1.010 |
| Tecnick | Tcexam | 10.1.011 |
| Tecnick | Tcexam | 10.1.012 |
| Tecnick | Tcexam | 10.1.013 |
| Tecnick | Tcexam | 11.0.000 |
| Tecnick | Tcexam | 11.0.001 |
| Tecnick | Tcexam | 11.0.002 |
| Tecnick | Tcexam | 11.0.003 |
| Tecnick | Tcexam | 11.0.004 |
| Tecnick | Tcexam | 11.0.005 |
| Tecnick | Tcexam | 11.0.006 |
| Tecnick | Tcexam | 11.0.007 |
| Tecnick | Tcexam | 11.0.008 |
| Tecnick | Tcexam | 11.0.009 |
| Tecnick | Tcexam | 11.0.010 |
| Tecnick | Tcexam | 11.0.011 |
| Tecnick | Tcexam | 11.0.012 |
| Tecnick | Tcexam | 11.0.013 |
| Tecnick | Tcexam | 11.0.014 |
| Tecnick | Tcexam | 11.0.015 |
| Tecnick | Tcexam | 11.0.016 |
| Tecnick | Tcexam | 11.1.000 |
| Tecnick | Tcexam | 11.1.001 |
| Tecnick | Tcexam | 11.1.002 |
| Tecnick | Tcexam | 11.1.003 |
| Tecnick | Tcexam | 11.1.004 |
| Tecnick | Tcexam | 11.1.005 |
| Tecnick | Tcexam | 11.1.006 |
| Tecnick | Tcexam | 11.1.007 |
| Tecnick | Tcexam | 11.1.008 |
| Tecnick | Tcexam | 11.1.009 |
| Tecnick | Tcexam | 11.1.010 |
| Tecnick | Tcexam | 11.1.011 |
| Tecnick | Tcexam | 11.1.012 |
| Tecnick | Tcexam | 11.1.013 |
| Tecnick | Tcexam | 11.1.014 |
| Tecnick | Tcexam | 11.1.015 |
| Tecnick | Tcexam | 11.1.016 |
| Tecnick | Tcexam | 11.1.017 |
Showing 50 of 102 affected configurations. See NVD for the full list.
References
- http://secunia.com/advisories/50539Vendor Advisory
- http://secunia.com/advisories/50539Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-4602?
Multiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_users_popup.php in Nicola Asuni TCExam before 11.3.009 allow remote attackers to inject arbitrary web script or HTML via the (1) cid or (2) uids parameter.
How severe is CVE-2012-4602?
Severity scoring for CVE-2012-4602 is pending analysis. The EPSS model estimates a 1.79% probability of exploitation in the next 30 days.
How do I fix CVE-2012-4602?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-4596Directory traversal vulnerability in McAfee Email Gateway (M…
- CVE-2012-4597Cross-site scripting (XSS) vulnerability in McAfee Email and…
- CVE-2012-4598An unspecified ActiveX control in McAfee Virtual Technician …
- CVE-2012-4599McAfee SmartFilter Administration, and SmartFilter Administr…
- CVE-2012-4600Cross-site scripting (XSS) vulnerability in Open Ticket Requ…
- CVE-2012-4601Multiple SQL injection vulnerabilities in Nicola Asuni TCExa…
- CVE-2012-4603Citrix XenApp Online Plug-in for Windows 12.1 and earlier, a…7.8
- CVE-2012-4604The TRITON management console in Websense Web Security befor…
- CVE-2012-4605The default configuration of the SMTP component in Websense …
- CVE-2012-4606Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 …7.8
- CVE-2012-4607Buffer overflow in nsrindexd in EMC NetWorker 7.5.x and 7.6.…
- CVE-2012-4608Cross-site request forgery (CSRF) vulnerability in the web i…
Are you affected by CVE-2012-4602?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST