Tecnick vulnerabilities

CVEs per yearBy the year they were published

1. 20247
2. 20252
3. 20262

Newest CVEs

• CVE-2026-4169

  Tecnick TCExam XML Export tce_xml_users.php F_xml_export_users cross site scripting

  Tecnick · TCExam

  Medium4.8
• CVE-2026-4168

  Tecnick TCExam Group tce_edit_group.php cross site scripting

  Tecnick · TCExam

  Medium4.8
• CVE-2025-23176

  Tecnick – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

  Tecnick · TCExam

  High8.8
• CVE-2025-23175

  Tecnick - Multiple XSS (CWE-79)

  Tecnick · TCExam

  Medium6.1
• CVE-2024-47926

  Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

  Tecnick · TCExam

  Critical9.8
• CVE-2024-47925

  Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  Tecnick · TCExam

  High7.5
• CVE-2024-56527

  An issue was discovered in TCPDF before 6.8.0. The Error function lacks an htmlspecialchars call for the error message.

  tecnick · tcpdf

  High7.5
• CVE-2024-56522

  An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != (aka loose comparison) and does not use a constant-time function to compare TCPDF…

  tecnick · tcpdf

  High7.5
• CVE-2024-56521

  An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely.

  tecnick · tcpdf

  Critical9.8
• CVE-2024-56520

  An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and…

  tecnick · tcpdf

  High7.3