CVE-2025-46173

CVE-2025-46173 - Online Exam Mastering System 1.0 における格納型クロスサイトスクリプティング XSS 📌 概要 CVE-2025-46173 は、code-projects の Online Exam Mastering System 1.0 で発見された 格納型クロスサイトスクリプティング XSS 脆弱性です。この脆弱性は feedback.php コンポーネントに存在し、名前フィールド へのユーザー入力が適切にサニタイズされないため、悪意のある攻撃者が任意の JavaScript を注入できるようになります。管理者が管理ダッシュボード...

CVE-2025-28121

💥 CVE-2025-28121 - Online Exam Mastering System 1.0 における反射型XSS 📝 説明 code-projects Online Exam Mastering System 1.0 には、feedback.php ファイルの q パラメータを介した反射型クロスサイトスクリプティング（XSS）の脆弱性があります。 この問題により、リモートの攻撃者が悪意のある JavaScript をアプリケーションに注入できるようになり、その入力は適切なサニタイズやエンコードが行われずにレスポンスに反映されます。悪用に成功すると、Cookie...

CVE-2026-86238

A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site scripting. The attack may be launched...

CVE-2026-86238 projectworlds Online Examination System Feedback Form feedback.php cross site scripting

A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site scripting. The attack may be launched...

CVE-2026-86238 projectworlds Online Examination System Feedback Form feedback.php cross site scripting

A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site scripting. The attack may be launched...

CVE-2026-86238

CVE-2026-86238 affects projectworlds Online Examination System 1.0 , specifically the Feedback Form component in the file feedback.php . An attacker can remotely manipulate the Name/Subject argument to trigger a cross-site scripting (XSS) flaw. The CVSS 3.1 score is 4.3 (MEDIUM) , with low attack...

EUVD-2026-72186

A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site scripting. The attack may be launched...

CVE-2026-86238: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site scripting. The attack may be launched...

PT-2026-86584

A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site scripting. The attack may be launched...

CVE-2026-13567

A security flaw has been discovered in code-projects Online Music Site 1.0. This affects an unknown part of the file /Frontend/Feedback.php of the component POST Request Handler. The manipulation of the argument fname/femail/faddress/fmessage results in cross site scripting. The attack may be...

CVE-2026-13567

The CVE-2026-13567 entry affects code-projects Online Music Site 1.0 in the POST Request Handler’s /Frontend/Feedback.php. An attacker can manipulate parameters fname, femail, faddress, or fmessage to trigger cross-site scripting. The issue is remote-present with a publicly released exploit (Proo...

CVE-2026-10606

A vulnerability was determined in DedeCMS 5.7.88. The affected element is the function TrimMsg of the file /plus/feedback.php of the component Feedback Handler. Executing a manipulation of the argument msg can lead to sql injection. The attack can be launched remotely. The exploit has been public...

CVE-2026-0570: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Music Site 1.0. This impacts an unknown function of the file /Frontend/Feedback.php. Performing a manipulation of the argument fname results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used...

Code-Projects Online Music Site SQL注入漏洞

Code-Projects Online Music Site is an open source online music site by Code-Projects. A SQL injection vulnerability exists in Code-Projects Online Music Site version 1.0, which stems from an incorrect manipulation of the parameter fname in the file /Frontend/Feedback.php, which could lead to a SQ...

CVE-2024-46336: Improper Neutralization of Input During Web Page Generation

kashipara School Management System 1.0 is vulnerable to Cross Site Scripting XSS via /clientuser/feedback.php...

EUVD-2009-3939

Malware in sbrugna...

EUVD-2020-21632

Malware in sbrugna...

EUVD-2025-12375

Malicious code in bioql PyPI...

CVE-2025-9473

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly an...

CVE-2025-9473

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly an...