CVE-2023-2771

A vulnerability, which was classified as critical, has been found in SourceCodester Online Exam System 1.0. This issue affects some unknown processing of the file /jurusanmatkul/data. The manipulation of the argument columns1data leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-28121

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...

CVE-2025-28087

Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php...

CVE-2025-28087

Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php...

CVE-2025-28087

Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php...

CVE-2025-28087

Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php...

PT-2025-13580 · Unknown · Sourcecodester Online Exam System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Exam System version 1.0 Description: The issue is related to SQL Injection via the dash.php file. This allows for potential exploitation. Recommendations: For Sourcecodester Online Exam System version 1.0, consider...

CVE-2025-28087

Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php...

CVE-2025-28087

CVE-2025-28087 affects Sourcecodester Online Exam System 1.0. The dash.php SQL injection vulnerability allows remote, unauthenticated access with high impact on confidentiality, integrity, and availability (CVSSv3.1: 9.8). ADP notes a PoC exploit is available; no patch/version remediation is spec...

Code-Projects Online Exam Mastering System 安全漏洞

Code-Projects Online Exam Mastering System is a Code-Projects open source online exam system. A security vulnerability exists in Code-Projects Online Exam Mastering System v1.0, which stems from an incorrect manipulation of the parameter fid that can lead to SQL injection...

CVE-2025-1082

A vulnerability classified as problematic has been found in Mindskip xzs-mysql 学之思开源考试系统 3.9.0. Affected is an unknown function of the file /api/admin/question/edit of the component Exam Edit Handler. The manipulation of the argument title/content leads to cross site scripting. It is possible to...

CVE-2024-57370

Cross Site Scripting vulnerability in sunnygkp10 Online Exam System master version allows a remote attacker to obtain sensitive information via the w parameter...

CVE-2024-57370

Cross Site Scripting vulnerability in sunnygkp10 Online Exam System master version allows a remote attacker to obtain sensitive information via the w parameter...

CVE-2024-57370

Cross Site Scripting vulnerability in sunnygkp10 Online Exam System master version allows a remote attacker to obtain sensitive information via the w parameter...

CVE-2024-57370

CVE-2024-57370 is a cross-site scripting vulnerability in the SunnyGKP10 Online Exam System (master version). The issue allows a remote attacker to obtain sensitive information via the w parameter. The NVD entry lists CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N with a base score of 6.1 (Medium...

CVE-2024-13110 Beijing Yunfan Internet Technology Yunfan Learning Examination System Exam Answer PaperController.java， information disclosure

A vulnerability classified as problematic has been found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected is an unknown function of the file src/main/java/com/yf/exam/modules/paper/controller/PaperController.java， of the component Exam Answer Handler. The...

CVE-2024-12892

A vulnerability classified as problematic was found in code-projects Online Exam Mastering System 1.0. Affected by this vulnerability is an unknown functionality of the file /sign.php?q=account.php. The manipulation of the argument name/gender/college leads to cross site scripting. The attack can...

CVE-2024-12890

A vulnerability was found in code-projects Online Exam Mastering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /update.php?q=quiz&step=2. The manipulation of the argument eid leads to sql injection. The attack may be initiated remotely. The...

code-projects Online Exam Mastering System 注入漏洞

Code-Projects Online Exam Mastering System is a Code-Projects open source online exam system. An injection vulnerability exists in code-projects Online Exam Mastering System version 1.0, which is caused by an SQL injection into the parameter eid...

CVE-2024-10737

A vulnerability classified as critical has been found in Codezips Free Exam Hall Seating Management System 1.0. Affected is an unknown function of the file /teacher.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has be...