Advisories · Technology

Tecnick TCExam.

Every CVE that names Tecnick TCExam among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-4169 CVE record

CVSS 4.8 Medium

Tecnick TCExam XML Export tce_xml_users.php F_xml_export_users cross site scripting
- Tecnick TCExam
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 15 Mar 2026
CVE-2026-4168 CVE record

CVSS 4.8 Medium

Tecnick TCExam Group tce_edit_group.php cross site scripting
- Tecnick TCExam
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 15 Mar 2026
CVE-2025-23176 CVE record

CVSS 8.8 High

Tecnick – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- Tecnick TCExam
- SQL injection
Not analysed yet 22 Apr 2025
CVE-2025-23175 CVE record

CVSS 6.1 Medium

Tecnick - Multiple XSS (CWE-79)
- Tecnick TCExam
- Cross-site scripting (XSS)
Not analysed yet 22 Apr 2025
CVE-2024-47926 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- Tecnick TCExam
- SQL injection
Not analysed yet 30 Dec 2024
CVE-2024-47925 CVE record

CVSS 7.5 High

Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- Tecnick TCExam
- Cross-site scripting (XSS)
Not analysed yet 30 Dec 2024