340 matches found
CVE-2022-42198
CVE-2022-42198 affects Simple Exam Reviewer Management System v1.0. The vulnerable component is the User List function, with an insecure file upload vulnerability as the root cause. CVSSv3.1 indicates high impact to confidentiality, integrity, and availability (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H...
CVE-2022-42200
CVE-2022-42200 affects the Simple Exam Reviewer Management System v1.0. The vulnerability is a Stored Cross Site Scripting (XSS) in the Exam List, allowing injected scripts to execute in other users’ browsers. Public documentation in the connected sources confirms the issue and its presence in th...
CVE-2022-42201
Simple Exam Reviewer Management System v1.0 is vulnerable to Insecure file upload...
Simple Exam Reviewer Management System 跨站请求伪造漏洞
Simple Exam Reviewer Management System is a Simple Exam Reviewer Management System by Carlo Montero Personal Developer. A security vulnerability exists in Simple Exam Reviewer Management System that originates from the vulnerability to cross-site request forgery CSRF attacks via Exam List...
Simple Exam Reviewer Management System 安全漏洞
Simple Exam Reviewer Management System is a Simple Exam Reviewer Management System by Carlo Montero Personal Developer. A security vulnerability exists in Simple Exam Reviewer Management System that stems from improper access control in the User List feature, which allows a user with low privileg...
CVE-2022-42200
Simple Exam Reviewer Management System v1.0 is vulnerable to Stored Cross Site Scripting XSS via the Exam List...
PT-2022-26306 · Unknown · Simple Exam Reviewer Management System
Name of the Vulnerable Software and Affected Versions: Simple Exam Reviewer Management System version 1.0 Description: The issue concerns an insecure file upload in the User List function. Recommendations: For Simple Exam Reviewer Management System version 1.0, consider restricting file uploads t...
CVE-2022-42199
CVE-2022-42199 affects Simple Exam Reviewer Management System v1.0 and is a CSRF vulnerability via the Exam List. CVSS v3.1 base score 8.8 (HIGH) with network attack vector, no privileges, user interaction required. Exploitation and impact details are not deeply described in all sources, but Red ...
CVE-2022-40877
Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter...
CVE-2022-40878
In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution RCE...
CVE-2022-40877
Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter...
Sql injection
Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter...
CVE-2022-40877
CVE-2022-40877 concerns the Exam Reviewer Management System 1.0, where the vulnerability is a SQL Injection in the id parameter. The available documents consistently identify the affected software as Exam Reviewer Management System 1.0, with the root cause being lack of input validation in the id...
CVE-2022-40877
Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter...
CVE-2022-40877
Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter...
CVE-2022-40878
In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution RCE...
CVE-2022-40878
In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution RCE...
PT-2022-25601 · Unknown · Exam Reviewer Management System
Name of the Vulnerable Software and Affected Versions: Exam Reviewer Management System version 1.0 Description: The issue concerns SQL Injection via the id parameter. This allows for potential manipulation of database queries, which could lead to unauthorized data access or modification...
