CVE-2007-2430: Tecnick.com Tcexam

High severity, CVSS 7.8. EPSS: 3.7% chance of exploitation in the next 30 days.

shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by placing file contents and directory traversal manipulations into a SessionUserLang cookie to public/code/index.php.

Affected products

• Tecnick.com Tcexam: up to and including 4.0.011

Published 2007-05-02. Last modified 2026-06-16.