CVE-2025-9473

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly an...

CVE-2025-9473 SourceCodester Online Bank Management System feedback.php sql injection

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly an...

CVE-2025-9473: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly an...

CVE-2025-28121

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...

PT-2025-17438 · Unknown · Code-Projects Online Exam Mastering System

Name of the Vulnerable Software and Affected Versions: code-projects Online Exam Mastering System version 1.0 Description: The issue concerns a Cross Site Scripting XSS vulnerability in the feedback.php file via the q parameter, allowing remote attackers to execute arbitrary code. Recommendations...

CVE-2025-28121

The code-projects Online Exam Mastering System 1.0 is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability within the feedback.php file. The root cause is the application's failure to properly sanitize or encode user input provided via the "q" parameter , which allows remote attacke...

CVE-2025-28121: Improper Neutralization of Input During Web Page Generation

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...

CVE-2024-0346

CVE-2024-0346: In CodeAstro Vehicle Booking System 1.0, the Feedback Page’s usr/user-give-feedback.php accepts and manipulates the parameter My Testemonial to trigger cross-site scripting. Attacks are remote and the exploit has been disclosed publicly. The connected documents do not provide a con...

CVE-2024-0346: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in CodeAstro Vehicle Booking System 1.0 and classified as problematic. This vulnerability affects unknown code of the file usr/user-give-feedback.php of the component Feedback Page. The manipulation of the argument My Testemonial leads to cross site scripting. The...

CVE-2020-29257

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the q parameter to feedback.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the q parameter to feedback.php...

CVE-2020-29259

CVE-2020-29259 is a cross-site scripting (XSS) vulnerability in Online Examination System 1.0, exploitable via the subject or feedback parameter to feedback.php. The root cause is insufficient input validation/ sanitization of user-supplied data, enabling attacker-controlled script execution in t...

CVE-2020-29257

CVE-2020-29257: Cross-site scripting in Online Examination System 1.0 (SourceCodester Online Examination System) via the q parameter to feedback.php. Root cause: user input in q is not properly filtered, enabling injection of JavaScript that can execute in the victim’s browser. Documented impact:...

CVE-2020-29257: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the q parameter to feedback.php...

PT-2020-17126

Name of the Vulnerable Software and Affected Versions Online Examination System version 1.0 Description The issue is related to a cross-site scripting XSS vulnerability. It can be exploited via the q parameter to the "feedback.php" endpoint. Recommendations For Online Examination System version...

CVE-2020-29259: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php...

PT-2020-17128

Name of the Vulnerable Software and Affected Versions Online Examination System version 1.0 Description The issue is a cross-site scripting XSS vulnerability. It can be exploited via the subject or feedback parameter to the "feedback.php" endpoint. This allows for potential malicious script...

PT-2019-9627

Name of the Vulnerable Software and Affected Versions Open Faculty Evaluation System version 5.6 Description The issue allows for SQL Injection in the submit feedback.php file. Recommendations For Open Faculty Evaluation System version 5.6, update to a version that fixes the SQL Injection issue i...

PT-2019-9628

Name of the Vulnerable Software and Affected Versions Open Faculty Evaluation System 7 for PHP 7 Description The issue allows for SQL Injection in the submit feedback.php file. Recommendations For Open Faculty Evaluation System 7 for PHP 7, update the submit feedback.php file to prevent SQL...

piiaf.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-665796 Description| Value ---|--- Affected Website:| piiaf.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...