CVE-2022-40877

Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter...

CVE-2022-40877

Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter...

CVE-2022-40877

CVE-2022-40877 concerns the Exam Reviewer Management System 1.0, where the vulnerability is a SQL Injection in the id parameter. The available documents consistently identify the affected software as Exam Reviewer Management System 1.0, with the root cause being lack of input validation in the id...

CVE-2022-40878

In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution RCE...

CVE-2022-40878

In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution RCE...

PT-2022-25601 · Unknown · Exam Reviewer Management System

Name of the Vulnerable Software and Affected Versions: Exam Reviewer Management System version 1.0 Description: The issue concerns SQL Injection via the id parameter. This allows for potential manipulation of database queries, which could lead to unauthorized data access or modification...

CVE-2022-40878: Unrestricted Upload of File with Dangerous Type

In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution RCE...

CVE-2022-40877: Improper Neutralization of Special Elements used in an SQL Command

Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter...

Improper Privilege Management in craftercms

A logged-in and authenticated user with a Reviewer Role may lock a content item...

GHSA-FJ9V-G8FW-VXMF Improper Privilege Management in craftercms

A logged-in and authenticated user with a Reviewer Role may lock a content item...

CVE-2021-23265

A logged-in and authenticated user with a Reviewer Role may lock a content item...

CVE-2021-23265

A logged-in and authenticated user with a Reviewer Role may lock a content item...

Information disclosure

A logged-in and authenticated user with a Reviewer Role may lock a content item...

CVE-2021-23265 Improper Privilege Management in Crafter Studio

A logged-in and authenticated user with a Reviewer Role may lock a content item...

CVE-2021-23265

Technical details about CVE-2021-23265 are not publicly provided in the supplied documents. The materials confirm a privilege-related issue in Crafter CMS allowing a Reviewer to lock content, but no specifics on affected versions or fix are included. Monitor for updates.

CVE-2021-23265

A logged-in and authenticated user with a Reviewer Role may lock a content item...

PT-2022-9386 · Crafter +3 · Crafter Cms +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A logged-in and authenticated user with a Reviewer Role may lock a content item. There is no information provided about the estimated number of...

CVE-2021-23265: Improper Privilege Management

A logged-in and authenticated user with a Reviewer Role may lock a content item...

Exam Reviewer Management System 1.0 - (id) SQL Injection Vulnerability

Exploit Title: Exam Reviewer Management System 1.0 - ‘id’ SQL Injection Exploit Author: Juli Agarwal@agarwaljuli Vendor Homepage: https://www.sourcecodester.com/php/15160/simple-exam-reviewer-management-system-phpoop-free-source-code.html Software Link:...

Exam Reviewer Management System 1.0 - ‘id’ SQL Injection

Exploit Title: Exam Reviewer Management System 1.0 - ‘id’ SQL Injection Date: 2022-02-18 Exploit Author: Juli Agarwal@agarwaljuli Vendor Homepage: https://www.sourcecodester.com/php/15160/simple-exam-reviewer-management-system-phpoop-free-source-code.html Software Link:...