Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Dynamic variable evaluation vulnerability in shared/config/tce_config.php in TCExam 4.0.011 and earlier allows remote attackers to conduct cross-site scripting (XSS) and possibly other attacks by modifying critical variables such as $_SERVER, as demonstrated by injecting web script via the _SERVER[SCRIPT_NAME] parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TCExam $_SERVER[] 'tce_config.php' 跨站脚本攻击漏洞
Vulnerability Description
TCExam 的shared/config/tce_config.php中存在动态变量评估漏洞。远程攻击者可以通过修改重要的变量，比如$_SERVER，来执行跨站脚本攻击和可能其他攻击，比如借助_SERVER[SCRIPT_NAME]参数注入web脚本。
CVSS Information
N/A
Vulnerability Type
N/A