Lucene search
+L

226 matches found

CNVD
CNVD
added 2023/05/19 12:0 a.m.19 views

SQL Injection Vulnerability in Online Exam System Version v1.0

Online Exam System is an online exam system. Online Exam System v1.0 suffers from a SQL injection vulnerability that originates from the lack of validation of external input SQL statements in the parameters columns, data of /jurusanmatkul/data. An attacker can exploit this vulnerability to execut...

8.8CVSS8.3AI score0.00734EPSS
Exploits1References1
CNVD
CNVD
added 2023/05/19 12:0 a.m.51 views

Online Exam System Master.php File SQL Injection Vulnerability

Online Exam System is an online exam system. Online Exam System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the parameters columns, data of /classes/Master.php?f=deleteservice/kelasdosen/data for external input SQL statements. An attacker can...

8.8CVSS9.1AI score0.00734EPSS
Exploits1References1
NVD
NVD
added 2023/05/17 7:15 p.m.27 views

CVE-2023-2771

A vulnerability, which was classified as critical, has been found in SourceCodester Online Exam System 1.0. This issue affects some unknown processing of the file /jurusanmatkul/data. The manipulation of the argument columns1data leads to sql injection. The attack may be initiated remotely. The...

8.8CVSS7.3AI score0.00734EPSS
Exploits1References3
OSV
OSV
added 2023/05/17 7:15 p.m.6 views

CVE-2023-2771

A vulnerability, which was classified as critical, has been found in SourceCodester Online Exam System 1.0. This issue affects some unknown processing of the file /jurusanmatkul/data. The manipulation of the argument columns1data leads to sql injection. The attack may be initiated remotely. The...

8.8CVSS5.7AI score0.00734EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/05/17 6:31 p.m.30 views

CVE-2023-2771 SourceCodester Online Exam System data sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Exam System 1.0. This issue affects some unknown processing of the file /jurusanmatkul/data. The manipulation of the argument columns1data leads to sql injection. The attack may be initiated remotely. The...

6.5CVSS9.2AI score0.00734EPSS
Exploits1References3
CVE
CVE
added 2023/05/17 6:31 p.m.57 views

CVE-2023-2771

CVE-2023-2771 affects SourceCodester Online Exam System 1.0. The vulnerability is a SQL injection in the processing of the file /jurusanmatkul/data, caused by manipulation of the argument columns[1][data]. The issue is exploitable remotely, and public exploitation details are available. Affected ...

8.8CVSS7.8AI score0.00734EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2023/05/17 6:15 p.m.23 views

CVE-2023-2770

A vulnerability classified as critical was found in SourceCodester Online Exam System 1.0. This vulnerability affects unknown code of the file /kelasdosen/data. The manipulation of the argument columns1data leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

8.8CVSS7.4AI score0.00734EPSS
Exploits1References3
OSV
OSV
added 2023/05/17 6:15 p.m.11 views

CVE-2023-2770

A vulnerability classified as critical was found in SourceCodester Online Exam System 1.0. This vulnerability affects unknown code of the file /kelasdosen/data. The manipulation of the argument columns1data leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

8.8CVSS5.7AI score0.00734EPSS
Exploits1References3
Prion
Prion
added 2023/05/17 6:15 p.m.19 views

Sql injection

A vulnerability classified as critical was found in SourceCodester Online Exam System 1.0. This vulnerability affects unknown code of the file /kelasdosen/data. The manipulation of the argument columns1data leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

6.5CVSS9.1AI score0.00734EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/05/17 6:0 p.m.31 views

CVE-2023-2770 SourceCodester Online Exam System data sql injection

A vulnerability classified as critical was found in SourceCodester Online Exam System 1.0. This vulnerability affects unknown code of the file /kelasdosen/data. The manipulation of the argument columns1data leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

6.5CVSS9.2AI score0.00734EPSS
Exploits1References3
CVE
CVE
added 2023/05/17 6:0 p.m.60 views

CVE-2023-2770

CVE-2023-2770 fixes a SQL injection in SourceCodester Online Exam System 1.0. The vulnerable component is the file /kelasdosen/data (affected by the columns[1][data] parameter), with remote exploitation and potential impact to confidentiality, integrity, and availability as noted in multiple sour...

8.8CVSS7.9AI score0.00734EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2023/05/17 12:0 a.m.6 views

Online Exam System SQL注入漏洞

Online Exam System is an online exam system. Online Exam System v1.0 suffers from a SQL injection vulnerability that originates from the lack of validation of external input SQL statements in the parameters columns, data of /jurusanmatkul/data. An attacker can exploit this vulnerability to execut...

8.8CVSS8.2AI score0.00734EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/05/17 12:0 a.m.7 views

Online Exam System SQL注入漏洞

Online Exam System is an online exam system. Online Exam System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the parameters columns, data of /classes/Master.php?f=deleteservice/kelasdosen/data for external input SQL statements. An attacker can...

8.8CVSS8.1AI score0.00734EPSS
Exploits1References4
NVD
NVD
added 2023/05/14 12:15 p.m.19 views

CVE-2023-2697

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /jurusan/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to launch the...

9.8CVSS7.5AI score0.0082EPSS
Exploits1References3
OSV
OSV
added 2023/05/14 12:15 p.m.3 views

CVE-2023-2697

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /jurusan/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to launch the...

9.8CVSS6.6AI score0.0082EPSS
Exploits1References3
Prion
Prion
added 2023/05/14 12:15 p.m.15 views

Sql injection

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /jurusan/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to launch the...

6.5CVSS9.7AI score0.0082EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/05/14 11:31 a.m.30 views

CVE-2023-2697 SourceCodester Online Exam System POST Parameter data sql injection

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /jurusan/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to launch the...

6.5CVSS10AI score0.0082EPSS
Exploits1References3
CVE
CVE
added 2023/05/14 11:31 a.m.51 views

CVE-2023-2697

CVE-2023-2697 affects SourceCodester Online Exam System 1.0. The vulnerability resides in the POST Parameter Handler, specifically the /jurusan/data file and the argument columns[1][data], whose manipulation leads to SQL injection. It is exploitable remotely, and the exploit has been disclosed pu...

9.8CVSS8.3AI score0.0082EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2023/05/14 11:15 a.m.17 views

CVE-2023-2695

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /kelas/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack can be...

9.8CVSS7.5AI score0.0082EPSS
Exploits1References3
OSV
OSV
added 2023/05/14 11:15 a.m.6 views

CVE-2023-2696

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /matkul/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack may be...

9.8CVSS5.7AI score0.0082EPSS
Exploits1References3
Rows per page
Query Builder