Lucene search
K

7 matches found

NVD
NVD
added 2026/07/05 6:16 a.m.11 views

CVE-2026-14706

A vulnerability was identified in code-projects Online Examination 1.0. This affects an unknown part of the file /update.php?q=addquiz of the component Quiz Creation Feature. The manipulation of the argument name/total/right/wrong/time/tag/desc leads to sql injection. The attack can be initiated...

6.5CVSS0.002EPSS
Exploits0References6
EUVD
EUVD
added 2026/07/05 5:0 a.m.10 views

EUVD-2026-41727

A vulnerability was identified in code-projects Online Examination 1.0. This affects an unknown part of the file /update.php?q=addquiz of the component Quiz Creation Feature. The manipulation of the argument name/total/right/wrong/time/tag/desc leads to sql injection. The attack can be initiated...

6.5CVSS6.5AI score0.002EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/05 5:0 a.m.8 views

CVE-2026-14706

A vulnerability was identified in code-projects Online Examination 1.0. This affects an unknown part of the file /update.php?q=addquiz of the component Quiz Creation Feature. The manipulation of the argument name/total/right/wrong/time/tag/desc leads to sql injection. The attack can be initiated...

6.5CVSS6.5AI score0.002EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2023/12/21 5:15 p.m.15 views

CVE-2023-45121

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'desc' parameter of the /update.php?q=addquiz resource does not validate the characters received and they are sent unfiltered to the database...

8.8CVSS0.00673EPSS
Exploits1References2
Prion
Prion
added 2023/12/21 5:15 p.m.17 views

Sql injection

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'desc' parameter of the /update.php?q=addquiz resource does not validate the characters received and they are sent unfiltered to the database...

6.5CVSS8.5AI score0.00673EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2023/12/21 4:23 p.m.16 views

CVE-2023-45121 Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'desc' parameter of the /update.php?q=addquiz resource does not validate the characters received and they are sent unfiltered to the database...

8.8CVSS10AI score0.00673EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/12/21 12:0 a.m.7 views

PT-2023-29420 · Unknown · Online Examination System

Name of the Vulnerable Software and Affected Versions: Online Examination System version 1.0 Description: The issue concerns multiple Authenticated SQL Injection vulnerabilities. The 'desc' parameter of the "/update.php?q=addquiz" resource does not validate the characters received, and they are...

9.8CVSS9.2AI score0.00673EPSS
Exploits1References5
Rows per page
Query Builder