VIR Vulnerability Intelligence Relay

CVE-2012-4602

medium
Published 2012-11-23 · Modified 2026-04-29
💬 Discuss on Community ✚ Propose mitigation
CVSS v3
—
CVSS v4 NEW
—
not yet in upstream
VIR risk
4.3

Description

Multiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_users_popup.php in Nicola Asuni TCExam before 11.3.009 allow remote attackers to inject arbitrary web script or HTML via the (1) cid or (2) uids parameter.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Application impact
VendorProductVersionsFixed
tecnicktcexam{"endIncluding":"11.3.008"}
tecnicktcexam10.1.000
tecnicktcexam10.1.001
tecnicktcexam10.1.002
tecnicktcexam10.1.003
tecnicktcexam10.1.004
tecnicktcexam10.1.005
tecnicktcexam10.1.006
tecnicktcexam10.1.007
tecnicktcexam10.1.008
tecnicktcexam10.1.009
tecnicktcexam10.1.010
tecnicktcexam10.1.011
tecnicktcexam10.1.012
tecnicktcexam10.1.013
tecnicktcexam11.0.000
tecnicktcexam11.0.001
tecnicktcexam11.0.002
tecnicktcexam11.0.003
tecnicktcexam11.0.004
tecnicktcexam11.0.005
tecnicktcexam11.0.006
tecnicktcexam11.0.007
tecnicktcexam11.0.008
tecnicktcexam11.0.009
tecnicktcexam11.0.010
tecnicktcexam11.0.011
tecnicktcexam11.0.012
tecnicktcexam11.0.013
tecnicktcexam11.0.014
tecnicktcexam11.0.015
tecnicktcexam11.0.016
tecnicktcexam11.1.000
tecnicktcexam11.1.001
tecnicktcexam11.1.002
tecnicktcexam11.1.003
tecnicktcexam11.1.004
tecnicktcexam11.1.005
tecnicktcexam11.1.006
tecnicktcexam11.1.007
tecnicktcexam11.1.008
tecnicktcexam11.1.009
tecnicktcexam11.1.010
tecnicktcexam11.1.011
tecnicktcexam11.1.012
tecnicktcexam11.1.013
tecnicktcexam11.1.014
tecnicktcexam11.1.015
tecnicktcexam11.1.016
tecnicktcexam11.1.017
tecnicktcexam11.1.018
tecnicktcexam11.1.019
tecnicktcexam11.1.020
tecnicktcexam11.1.021
tecnicktcexam11.1.022
tecnicktcexam11.1.023
tecnicktcexam11.1.024
tecnicktcexam11.1.025
tecnicktcexam11.1.026
tecnicktcexam11.1.027
tecnicktcexam11.1.028
tecnicktcexam11.1.029
tecnicktcexam11.1.030
tecnicktcexam11.1.031
tecnicktcexam11.2.000
tecnicktcexam11.2.001
tecnicktcexam11.2.002
tecnicktcexam11.2.003
tecnicktcexam11.2.004
tecnicktcexam11.2.005
tecnicktcexam11.2.006
tecnicktcexam11.2.007
tecnicktcexam11.2.008
tecnicktcexam11.2.010
tecnicktcexam11.2.011
tecnicktcexam11.2.012
tecnicktcexam11.2.013
tecnicktcexam11.2.014
tecnicktcexam11.2.015
tecnicktcexam11.2.016
tecnicktcexam11.2.017
tecnicktcexam11.2.018
tecnicktcexam11.2.020
tecnicktcexam11.2.021
tecnicktcexam11.2.022
tecnicktcexam11.2.023
tecnicktcexam11.2.025
tecnicktcexam11.2.026
tecnicktcexam11.2.027
tecnicktcexam11.2.028
tecnicktcexam11.2.029
tecnicktcexam11.2.030
tecnicktcexam11.2.031
tecnicktcexam11.2.032
tecnicktcexam11.3.000
tecnicktcexam11.3.001
tecnicktcexam11.3.002
tecnicktcexam11.3.003
tecnicktcexam11.3.004
tecnicktcexam11.3.005
tecnicktcexam11.3.006
tecnicktcexam11.3.007

References

CWEs

CWE-79

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.