Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Missing authorisation in TCExam
Vulnerability Description
When access to the "admin" folder is not protected by some external authorization mechanisms e.g. Apache Basic Auth, it is possible for any user to download protected information like exam answers.
CVSS Information
N/A
Vulnerability Type
授权机制缺失
Vulnerability Title
Tecnick TCExam 安全漏洞
Vulnerability Description
Tecnick TCExam是英国Tecnick公司的一套基于Web的开源电子考试系统。该系统主要用于在线考试等。 Tecnick TCExam 15.1.0之前版本存在安全漏洞，该漏洞源于admin文件夹的外部授权机制保护不足，任何用户都可以下载受保护的信息。
CVSS Information
N/A
Vulnerability Type
N/A