41 matches found
CVE-2025-46173
CVE-2025-46173 - 온라인 시험 마스터링 시스템 1.0의 저장형 크로스 사이트 스크립팅 XSS 📌 요약 CVE-2025-46173 은 code-projects 의 Online Exam Mastering System 1.0에서 발견된 저장형 크로스 사이트 스크립팅 XSS 취약점입니다. 이 취약점은 feedback.php 구성 요소에 존재하며, 이름 필드 의 사용자 입력이 적절히 이스케이프되지 않아 악의적인 공격자가 임의의 JavaScript를 주입할 수 있습니다. 관리자가 이 피드백을 관리자 대시보드dash.php에서...
CVE-2025-28121
💥 CVE-2025-28121 - Online Exam Mastering System 1.0의 반사형 XSS 📝 설명 code-projects Online Exam Mastering System 1.0 은 feedback.php 파일의 q 매개변수를 통해 반사형 크로스 사이트 스크립팅XSS에 취약합니다. 이 문제는 원격 공격자가 애플리케이션에 악성 JavaScript를 주입할 수 있게 하며, 이 스크립트는 적절한 살균 또는 인코딩 없이 응답에 반사됩니다. 성공적으로 악용될 경우 쿠키 도난, 계정 탈취 또는 기타 클라이언트 측...
EUVD-2024-51172
Malicious code in bioql PyPI...
EUVD-2024-51171
Malicious code in bioql PyPI...
EUVD-2025-6501
Malicious code in bioql PyPI...
EUVD-2024-51170
Malicious code in bioql PyPI...
CVE-2025-46173
code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS via the name field in the feedback form...
CVE-2025-46173
code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS via the name field in the feedback form...
CVE-2025-46173
CVE-2025-46173 is a stored XSS vulnerability in code-projects Online Exam Mastering System 1.0. The issue occurs in the feedback form’s name field and is triggered when an administrator views the feedback in the admin dashboard (dash.php), allowing injected scripts to execute in the admin’s brows...
CVE-2025-46173
code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS via the name field in the feedback form...
CVE-2024-12892
A vulnerability classified as problematic was found in code-projects Online Exam Mastering System 1.0. Affected by this vulnerability is an unknown functionality of the file /sign.php?q=account.php. The manipulation of the argument name/gender/college leads to cross site scripting. The attack can...
CVE-2024-12891
A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Affected is an unknown function of the file /account.php?q=quiz=2. The manipulation of the argument eid leads to sql injection. It is possible to launch the attack remotely. The exploit has be...
CVE-2024-12890
A vulnerability was found in code-projects Online Exam Mastering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /update.php?q=quiz=2. The manipulation of the argument eid leads to sql injection. The attack may be initiated remotely. The exploit h...
CVE-2025-28121
code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...
📄 Online Exam Mastering System 1.0 Cross Site Scripting
Online Exam Mastering System version 1.0 suffers from a cross site scripting vulnerability. Exploit Title: code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting XSS Google Dork: inurl:/exam/feedback.php Date: 2025-04-19 Exploit Author: Pruthu Raut Vendor Homepage:...
code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting (XSS)
Exploit Title: code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting XSS Google Dork: inurl:/exam/feedback.php Date: 2025-04-19 Exploit Author: Pruthu Raut Vendor Homepage: https://code-projects.org/ Software Link:...
CVE-2025-28121
code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...
PT-2025-17438 · Unknown · Code-Projects Online Exam Mastering System
Name of the Vulnerable Software and Affected Versions: code-projects Online Exam Mastering System version 1.0 Description: The issue concerns a Cross Site Scripting XSS vulnerability in the feedback.php file via the q parameter, allowing remote attackers to execute arbitrary code. Recommendations...