Lucene search
K

1136 matches found

Nuclei
Nuclei
added 16 hours ago18 views

Joomla! Component Online Exam 1.5.0 - Local File Inclusion

A directory traversal vulnerability in the Online Examination aka Online Exam or comonlineexam component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1715 info: name: Joomla! Component Online Exam 1.5.0 -...

6.8CVSS5.9AI score0.02055EPSS
Exploits2References5
RedhatCVE
RedhatCVE
added 2026/04/20 7:23 p.m.1 views

CVE-2026-6573

A vulnerability was detected in PHPEMS 11.0. This affects the function temppage of the file /app/exam/controller/exams.master.php of the component Instant Exam Creation Handler. The manipulation of the argument uploadfile results in server-side request forgery. The attack can be executed remotely...

6.5CVSS6.3AI score0.00014EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/19 12:45 p.m.26 views

CVE-2026-6573 PHPEMS Instant Exam Creation exams.master.php temppage server-side request forgery

A vulnerability was detected in PHPEMS 11.0. This affects the function temppage of the file /app/exam/controller/exams.master.php of the component Instant Exam Creation Handler. The manipulation of the argument uploadfile results in server-side request forgery. The attack can be executed remotely...

6.5CVSS0.00014EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/04/19 12:45 p.m.0 views

CVE-2026-6573 PHPEMS Instant Exam Creation exams.master.php temppage server-side request forgery

A vulnerability was detected in PHPEMS 11.0. This affects the function temppage of the file /app/exam/controller/exams.master.php of the component Instant Exam Creation Handler. The manipulation of the argument uploadfile results in server-side request forgery. The attack can be executed remotely...

6.5CVSS5.5AI score0.00014EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/04/14 1:22 a.m.0 views

CVE-2026-36919

Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php...

2.7CVSS5.9AI score0.00033EPSS
Exploits1References1
EUVD
EUVD
added 2026/04/13 3:31 p.m.0 views

EUVD-2026-21916

Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php...

2.7CVSS5.9AI score0.00033EPSS
Exploits1References2
NVD
NVD
added 2026/04/13 1:16 p.m.0 views

CVE-2026-36919

Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php...

2.7CVSS0.00033EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/04/13 12:0 a.m.1 views

SourceCodester Online Reviewer System 安全漏洞

The SourceCodester Online Reviewer System is an open-source online review system developed by SourceCodester. Version 1.0 of the SourceCodester Online Reviewer System contains a security vulnerability, which stems from an SQL injection vulnerability in the...

2.7CVSS5.9AI score0.00033EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/04/13 12:0 a.m.0 views

CVE-2026-36919

Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php...

5.9AI score0.00033EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/04/13 12:0 a.m.0 views

PT-2026-32335

Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php...

5.9AI score0.00033EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/04/13 12:0 a.m.22 views

CVE-2026-36919

Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php...

0.00033EPSS
Exploits1References1
CVE
CVE
added 2026/04/13 12:0 a.m.2 views

CVE-2026-36919

CVE-2026-36919 affects Sourcecodester Online Reviewer System v1.0. The vulnerability is a SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php. The available records confirm the impact is SQL injection but do not provide patch details or specific vulnerable param...

2.7CVSS5.9AI score0.00033EPSS
Exploits1References1Affected Software1
GithubExploit
GithubExploit
added 2026/04/06 12:48 p.m.88 views

Exploit for CVE-2026-35678

Vulnerability Research Report: All Eduplus ERP Insecure Direct...

6AI score
Exploits1
RedhatCVE
RedhatCVE
added 2026/03/31 4:59 a.m.3 views

CVE-2026-5106

A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/updatefst.php. Executing a manipulation of the argument sname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

4.8CVSS4.2AI score0.0003EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/30 4:0 a.m.23 views

CVE-2026-5106 code-projects Exam Form Submission update_fst.php cross site scripting

A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/updatefst.php. Executing a manipulation of the argument sname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

4.8CVSS0.0003EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/30 4:0 a.m.0 views

CVE-2026-5106

A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/updatefst.php. Executing a manipulation of the argument sname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

4.8CVSS4.2AI score0.0003EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2026/03/30 4:0 a.m.5 views

CVE-2026-5106

Affects code-projects Exam Form Submission 1.0 . The vulnerability lies in the file /admin/update_fst.php where manipulating the sname argument can cause cross-site scripting (XSS). It can be triggered remotely and an exploit has been published. The Connected documents do not provide a specific C...

4.8CVSS4.2AI score0.0003EPSS
Exploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/30 12:0 a.m.2 views

PT-2026-28760

A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/update fst.php. Executing a manipulation of the argument sname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

4.8CVSS4.2AI score0.0003EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2026/03/28 4:56 a.m.1 views

CVE-2026-4909

A weakness has been identified in code-projects Exam Form Submission 1.0. This impacts an unknown function of the file /admin/updates7.php. This manipulation of the argument sname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to t...

4.8CVSS4.4AI score0.00013EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/27 2:25 a.m.31 views

CVE-2026-4909 code-projects Exam Form Submission update_s7.php cross site scripting

A weakness has been identified in code-projects Exam Form Submission 1.0. This impacts an unknown function of the file /admin/updates7.php. This manipulation of the argument sname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to t...

4.8CVSS0.00013EPSS
Exploits0References5
Rows per page
Query Builder