Lucene search
+L

433 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 7:37 a.m.10 views

CVE-2024-4913

A vulnerability classified as critical was found in Campcodes Online Examination System 1.0. This vulnerability affects unknown code of the file exam.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

9.8CVSS7.6AI score0.00541EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 7:36 a.m.18 views

CVE-2024-13111

A vulnerability classified as critical was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected by this vulnerability is an unknown functionality of the file src/main/java/com/yf/exam/modules/sys/user/controller/SysUserControl of the component JWT Token...

8.1CVSS5.6AI score0.00751EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:35 a.m.9 views

CVE-2024-13110

A vulnerability classified as problematic has been found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected is an unknown function of the file src/main/java/com/yf/exam/modules/paper/controller/PaperController.java, of the component Exam Answer Handler. The...

7.5CVSS4.5AI score0.00605EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:1 a.m.6 views

CVE-2023-45201

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL...

6.1CVSS6.8AI score0.00391EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 5:1 a.m.12 views

CVE-2023-45111

Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.2AI score0.007EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 5:1 a.m.10 views

CVE-2023-45202

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL...

6.1CVSS6.8AI score0.00407EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:52 p.m.11 views

CVE-2022-42066

Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php...

6.1CVSS6.3AI score0.00551EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:28 p.m.10 views

CVE-2020-29205

XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field...

6.1CVSS6.5AI score0.01533EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/17 5:4 p.m.20 views

CVE-2025-4706

A vulnerability was found in projectworlds Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Procedure3byearwiseVisit.php. The manipulation of the argument Visityear leads to sql injection. The attack can be initiated remotely. T...

9.8CVSS7.5AI score0.00438EPSS
SaveExploits1References1
CVE
CVE
added 2025/05/15 4:31 p.m.46 views

CVE-2025-4706

Affected software : ProjectWorlds Online Examination System 1.0. The vulnerability affects the file /Procedure3b_yearwiseVisit.php and is triggered by manipulating the Visit_year parameter. Root cause / vulnerability type : SQL injection due to improper handling of input in the affected PHP code....

9.8CVSS7.6AI score0.00438EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/15 4:31 p.m.7 views

CVE-2025-4706 projectworlds Online Examination System Procedure3b_yearwiseVisit.php sql injection

A vulnerability was found in projectworlds Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Procedure3byearwiseVisit.php. The manipulation of the argument Visityear leads to sql injection. The attack can be initiated remotely. T...

7.5CVSS7.5AI score0.00438EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/05/15 4:31 p.m.25 views

CVE-2025-4706 projectworlds Online Examination System Procedure3b_yearwiseVisit.php sql injection

A vulnerability was found in projectworlds Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Procedure3byearwiseVisit.php. The manipulation of the argument Visityear leads to sql injection. The attack can be initiated remotely. T...

7.5CVSS0.00438EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/05/15 12:0 a.m.5 views

Projectworlds Online Examination System 注入漏洞

Projectworlds Online Examination System is an online examination system from Projectworlds India. Projectworlds Online Examination System version 1.0 suffers from an injection vulnerability that stems from SQL injection due to incorrect manipulation of the parameter Visityear in the file...

9.8CVSS7.8AI score0.00438EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/05/01 12:0 p.m.16 views

CVE-2025-4058

A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0. This affects an unknown part of the file /Bloodgroopprocess.php. The manipulation of the argument PatBloodGroup1 leads to sql injection. It is possible to initiate the attack remotely. The exploi...

9.8CVSS7.4AI score0.00478EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/04/30 8:22 p.m.15 views

CVE-2025-4034

A vulnerability classified as critical was found in projectworlds Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /inserdocprocess.php. The manipulation of the argument DocID leads to sql injection. The attack can be launched remotely. The...

9.8CVSS7.4AI score0.00472EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/29 12:15 p.m.24 views

CVE-2025-4058

A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0. This affects an unknown part of the file /Bloodgroopprocess.php. The manipulation of the argument PatBloodGroup1 leads to sql injection. It is possible to initiate the attack remotely. The exploi...

9.8CVSS0.00478EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/04/29 11:31 a.m.35 views

CVE-2025-4058 Projectworlds Online Examination System Bloodgroop_process.php sql injection

A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0. This affects an unknown part of the file /Bloodgroopprocess.php. The manipulation of the argument PatBloodGroup1 leads to sql injection. It is possible to initiate the attack remotely. The exploi...

7.5CVSS0.00478EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/04/29 11:31 a.m.11 views

CVE-2025-4058 Projectworlds Online Examination System Bloodgroop_process.php sql injection

A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0. This affects an unknown part of the file /Bloodgroopprocess.php. The manipulation of the argument PatBloodGroup1 leads to sql injection. It is possible to initiate the attack remotely. The exploi...

7.5CVSS7.5AI score0.00478EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/04/29 12:0 a.m.6 views

PT-2025-18144 · Unknown · Projectworlds Online Examination System

Name of the Vulnerable Software and Affected Versions: Projectworlds Online Examination System version 1.0 Description: A critical vulnerability has been found in Projectworlds Online Examination System. This affects an unknown part of the file /Bloodgroop process.php. The manipulation of the...

9.8CVSS7.5AI score0.00478EPSS
SaveExploits1References13
NVD
NVD
added 2025/04/28 8:15 p.m.40 views

CVE-2025-4034

A vulnerability classified as critical was found in projectworlds Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /inserdocprocess.php. The manipulation of the argument DocID leads to sql injection. The attack can be launched remotely. The...

9.8CVSS0.00472EPSS
SaveExploits1References4
Rows per page
Query Builder