CVE-2024-40479

A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL commands via the "eid" parameter...

CVE-2024-40479

A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL commands via the "eid" parameter...

CVE-2024-40478

A Stored Cross Site Scripting XSS vulnerability was found in "/admin/afeedback.php" in Kashipara Online Exam System v1.0, which allows remote attackers to execute arbitrary code via "rname" and "email" parameter fields...

Online Exam System 安全漏洞

Online Exam System is an online exam system by oretnom23 individual developers. A security vulnerability exists in Online Exam System v1.0, which stems from the eid parameter in the /admin/quizquestion.php page that was found to contain an SQL injection vulnerability...

Online Exam System 安全漏洞

Online Exam System is an online exam system by oretnom23 individual developers. A security vulnerability exists in Online Exam System v1.0, which originated when the /admin/update.php and /admin/dashboard.php pages were found to contain an access control vulnerability...

Kashipara Online Exam System 安全漏洞

Kashipara Online Exam System is an online exam system from Kashipara Inc. A security vulnerability exists in Kashipara Online Exam System version v1.0, which originated when the rname and email parameters in the /admin/afeedback.php page were found to contain a stored cross-site scripting XSS...

CVE-2024-40479

A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL commands via the "eid" parameter...

CVE-2024-40480

A Broken Access Control vulnerability was found in /admin/update.php and /admin/dashboard.php in Kashipara Online Exam System v1.0, which allows remote unauthenticated attackers to view administrator dashboard and delete valid user accounts via the direct URL access...

CVE-2024-40480

CVE-2024-40480 affects Kashipara Online Exam System v1.0. The vulnerability is a Broken Access Control in /admin/update.php and /admin/dashboard.php that allows remote unauthenticated attackers to view the admin dashboard and delete valid user accounts via direct URL access. The issue is confirme...

CVE-2024-40479

A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL commands via the "eid" parameter...

CVE-2024-40479

Kashipara Online Exam System v1.0 is affected by a SQL injection vulnerability in /admin/quizquestion.php, exploitable via the eid parameter. The underlying issue allows remote attackers to execute arbitrary SQL commands. Documents do not provide a confirmed patch version; a PT Security advisory ...

CVE-2024-40478

Kashipara Online Exam System v1.0 is affected by a Stored Cross Site Scripting (XSS) vulnerability in the /admin/afeedback.php endpoint. The issue allows remote attackers to execute arbitrary code via the rname and email parameters, as described across multiple sources (CVE-2024-40478, NVD/other ...

PT-2024-28865 · Unknown · Kashipara Online Exam System

Name of the Vulnerable Software and Affected Versions: Kashipara Online Exam System version 1.0 Description: A Stored Cross Site Scripting XSS issue was found in the "/admin/afeedback.php" endpoint, allowing remote attackers to execute arbitrary code via the rname and email parameter fields. This...

PT-2024-33333 · Campcodes · Campcodes Online Examination System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Examination System version 1.0 Description: A critical issue has been found in the system, affecting the file addExamExe.php. The manipulation of the examTitle argument leads to SQL injection. It is possible to initiate the...

SurveyKing 安全漏洞

SurveyKing is a powerful questionnaire system and exam system for javahuang individual developers. A security vulnerability exists in SurveyKing v1.3.1, which stems from the ability to keep a session active after a user logs out...

CVE-2024-2942 Campcodes Online Examination System deleteQuestionExe.php sql injection

A vulnerability, which was classified as critical, was found in Campcodes Online Examination System 1.0. This affects an unknown part of the file /adminpanel/admin/query/deleteQuestionExe.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

Exploit for CVE-2024-22890

CVE List CVE-2024-22890: My e-Diary App - Cross-Site-Script...

Exploit for CVE-2024-22909

CVE-2024-22909 : Online-Exam-System - Cross-Site...

Sql injection

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'demail' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database...

Logic flaw vulnerability in n5 of the Nanqiong examination system (CNVD-2023-59091)

Nanqiong Exam System n5 is a handheld learning system that realizes online practice, mode exam, exam and result inquiry in one. A logic flaw vulnerability exists in Nanqiong Exam System n5, which can be exploited by an attacker to log into the system and obtain sensitive information...