PT-2025-3432

Name of the Vulnerable Software and Affected Versions sunnygkp10 Online Exam System version master Description The issue allows a remote attacker to obtain sensitive information through the w parameter. This is a Cross Site Scripting issue that can be exploited to gain access to confidential data...

CVE-2024-57370: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in sunnygkp10 Online Exam System master version allows a remote attacker to obtain sensitive information via the w parameter...

SourceCodester Online Examination System Cross-Site Scripting Vulnerability (CNVD-2020-74075)

SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. in the United States. SourceCodester Online Examination System 1.0 suffers from a cross-site scripting vulnerability that originates in the w parameter of index.php, which can be exploited by an...

CVE-2020-29258

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the w parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the w parameter to index.php...

CVE-2020-29258: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the w parameter to index.php...

SourceCodester Online Examination System 跨站脚本漏洞

SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. in the United States. SourceCodester Online Examination System 1.0 suffers from a cross-site scripting vulnerability that originates in the w parameter of index.php, which can be exploited by an...

PT-2020-17127

Name of the Vulnerable Software and Affected Versions Online Examination System version 1.0 Description The issue is a cross-site scripting XSS vulnerability. It can be exploited via the w parameter to the "index.php" endpoint. This allows for potential malicious script injection and execution...

CVE-2010-1309: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Irmin CMS formerly Pepsi CMS 0.6 BETA2 allows remote attackers to read arbitrary files via a .. dot dot in the w parameter to index.php...

CVE-2006-6835: Undefined Security Weakness

SQL injection vulnerability in Journal.inc.php in Neocrome Land Down Under LDU 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the w parameter to journal.php...

CVE-2006-3036

Multiple cross-site scripting XSS vulnerabilities in 35mmslidegallery 6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 imgdir parameter in a index.php, and the 2 w, 3 h, and 4 t parameters in b popup.php...

CVE-2005-2674: Undefined Security Weakness

Note: the vendor has disputed this issue. Multiple cross-site scripting XSS vulnerabilities in Land Down Under LDU 800 allow remote attackers to inject arbitrary web script or HTML via the 1 c or 2 m parameters to index.php or 3 w parameter to journal.php. NOTE: this issue has been disputed by th...