EUVD-2021-20843

Malware in sbrugna...

CVE-2021-34181

Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...

TomExam Cross-Site Scripting Vulnerability

TomExam is a free and efficient online exam system software. TomExam version 3.0 suffers from a cross-site scripting XSS vulnerability that can be exploited by an attacker to cause cross-site scripting XSS via the pname parameter passed to list.thtml...

CVE-2021-34181

Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...

CVE-2021-34181

Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...

Cross site scripting

Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...

CVE-2021-34181: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...

TomExam Cross-site Scripting Vulnerabilities

TomExam is a free and efficient online exam system software. TomExam version 3.0 suffers from a cross-site scripting XSS vulnerability that can be exploited by an attacker to cause cross-site scripting XSS via the pname parameter passed to list.thtml...

CVE-2021-34181

Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...

PT-2022-10325 · Tomexam · Tomexam

Name of the Vulnerable Software and Affected Versions: TomExam version 3.0 Description: The issue is a Cross Site Scripting XSS vulnerability. It can be exploited via the p name parameter in the "list.thtml" endpoint. This allows for malicious script execution. Recommendations: For TomExam versio...

CVE-2021-34181

Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...

CVE-2021-34181

The connected documents confirm CVE-2021-34181 is a Cross Site Scripting (XSS) vulnerability in TomExam 3.0 exploitable via the p_name parameter passed to list.thtml. The root cause is an input handling/output encoding weakness that allows script injection. Affected software is TomExam 3.0; no ex...

Stored Cross-Site Scripting Vulnerability in TomExam

TomExam is a web-based exam system that runs in both public and LAN environments, creates question banks and organizes exams. A stored cross-site scripting vulnerability exists in TomExam. An attacker can exploit the vulnerability to obtain an administrator cookie...