CVE-2026-40833

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dash.php files saveDashboardLayout function due to improper neutralization of special elements in a SQL INSERT command allowing for reading the whole database and inserting entries into a non...

CVE-2026-40833

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dash.php files saveDashboardLayout function due to improper neutralization of special elements in a SQL INSERT command allowing for reading the whole database and inserting entries into a non...

CVE-2026-40833

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dash.php files saveDashboardLayout function due to improper neutralization of special elements in a SQL INSERT command allowing for reading the whole database and inserting entries into a non...

CVE-2026-40833 Authenticated SQLi in saveDashboardLayout function

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dash.php files saveDashboardLayout function due to improper neutralization of special elements in a SQL INSERT command allowing for reading the whole database and inserting entries into a non...

PT-2026-43599

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dash.php files saveDashboardLayout function due to improper neutralization of special elements in a SQL INSERT command allowing for reading the whole database and inserting entries into a non...

CVE-2026-40833: Improper Neutralization of Special Elements used in an SQL Command

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dash.php files saveDashboardLayout function due to improper neutralization of special elements in a SQL INSERT command allowing for reading the whole database and inserting entries into a non...

CVE-2025-28087

Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php...

CVE-2025-28087

Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php...

CVE-2025-28087

Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php...

CVE-2025-28087: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php...

PT-2025-13580 · Unknown · Sourcecodester Online Exam System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Exam System version 1.0 Description: The issue is related to SQL Injection via the dash.php file. This allows for potential exploitation. Recommendations: For Sourcecodester Online Exam System version 1.0, consider...

PT-2020-4066

Name of the Vulnerable Software and Affected Versions: Online-Exam-System affected versions not specified Description: The issue is related to the fid parameter in the dash.php file of the Online-Exam-System, which is vulnerable due to a lack of protection against SQL query structure exploitation...