439 matches found
CVE-2021-46086
xzs-mysql = t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destro...
CVE-2021-46086
xzs-mysql = t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destro...
CVE-2021-46086
The CVE-2021-46086 entry affects Mindskip xzs-mysql (version >= t3.4.0). The vulnerability arises from insecure permissions in the submission function of the online examination system, enabling an attacker to modify packet parameters and corrupt real data. Documents indicate an unsafe vulnerab...
SourceCodester Online Examination System SQL Injection Vulnerability
SourceCodester Projectworlds Online Examination System is an online examination system from SourceCodester, Inc. v1.0 contains a SQL injection vulnerability that stems from the failure of the eid parameter in the product's account.php page to properly filter special characters in user input data...
Mindskip xzs-mysql 权限许可和访问控制问题漏洞
Mindskip xzs-mysql is a java + vue front-end and back-end separation of the examination system from Wuhan, China Mindskip technology Mindskip company. The main advantages are simple and fast development and deployment, friendly interface design and clear code structure. Support web end and wechat...
CVE-2021-46307
An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php...
CVE-2021-46307
An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php...
CVE-2021-46307
An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php...
Sql injection
An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php...
CVE-2021-46307
An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php...
CVE-2021-46307
CVE-2021-46307 affects the Projectworlds Online Examination System 1.0 . The vulnerability is an SQL injection in the parameter eid of the page account.php , caused by insufficient input filtering. The CVSS metrics indicate a CRITICAL risk (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; base scor...
Online Examination System Project 1.0 SQL Injection
Title: Online Examination System Project 1.0 SQL - Injections Author: nu11secur1ty Date: 01.10.2022 Vendor: https://projectworlds.in/free-projects/php-projects/ Software: https://projectworlds.in/free-projects/php-projects/online-examination/ Description: The eid parameter in account.php from...
Online Examination System Project 1.0 SQL Injection Vulnerability
Title: Online Examination System Project 1.0 SQL - Injections Author: nu11secur1ty Vendor: https://projectworlds.in/free-projects/php-projects/ Software: https://projectworlds.in/free-projects/php-projects/online-examination/ Description: The eid parameter in account.php from Online Examination...
The vulnerability of the electronic examination system TCExam arises from the lack of measures taken to protect the structure of the web page. This allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the electronic examination system TCExam exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information through a specially...
Projectworlds Online Examination System Cross-Site Request Forgery Vulnerability
Projectworlds Online Examination System is an online examination system. projectworlds Online Examination System cross-site request forgery vulnerability, which can be exploited by attackers to delete existing users...
Project Worlds Online Examination System Cross-Site Scripting Vulnerability
Project Worlds Online Examination System is an online examination system. version 1.0 of ProjectWorlds College Management System is vulnerable to a cross-site scripting vulnerability that could be exploited to inject malicious JavaScript code to execute and steal user credentials...
CVE-2020-26006
Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting XSS via account.php...
CVE-2020-25411
Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user...