Description

When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which included sensitive database backup files.

Remediation

References

CVE-2021-20114

Related Vulnerabilities

Drupal Core 8.x.x Arbitrary File Overwrite (8.0.0 - 8.7.14)

WordPress Plugin Tapfiliate Cross-Site Scripting (3.0.12)

WordPress Plugin Subscribe to Comments Local File Inclusion (2.1.2)

WordPress Plugin WP DSGVO Tools (GDPR) Cross-Site Scripting (3.1.23)

Oracle Database Server CVE-2023-21949 Vulnerability (CVE-2023-21949)

Severity

High

Classification

CVE-2021-20114 CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities