TTecnick

Products

Exploited and recent CVEs

• CVE-2026-4169 Low 2.4 Tecnick TCExam XML Export tce_xml_users.php F_xml_export_users cross site scripting 0.2%
• CVE-2026-4168 Low 2.4 Tecnick TCExam Group tce_edit_group.php cross site scripting 0.3%
• CVE-2025-23176 High 8.8 Tecnick – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 0.5%
• CVE-2025-23175 Medium 6.1 Tecnick - Multiple XSS (CWE-79) 0.2%
• CVE-2024-47926 Critical 9.8 Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 0.6%
• CVE-2024-47925 High 7.5 Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 0.5%
• CVE-2024-56527 High 7.5 An issue was discovered in TCPDF before 6.8.0. The Error function lacks an htmlspecialchars call for the error message. 0.8%
• CVE-2024-56520 High 7.3 An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and TrueType fonts is misparsed. 0.6%
• CVE-2024-56522 High 7.5 An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != (aka loose comparison) and does not use a constant-time function to compare TCPDF tag hashes. 0.6%
• CVE-2024-56521 Critical 9.8 An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely. 0.8%
• CVE-2024-56519 High 7.5 An issue was discovered in TCPDF before 6.8.0. setSVGStyles does not sanitize the SVG font-family attribute. 0.6%