Simple Online College Entrance Exam System 1.0 - (Multiple) SQL injection Vulnerability

Exploit Title: Simple Online College Entrance Exam System 1.0 - 'Multiple' SQL injection Exploit Author: Amine ismail @aminei Vendor Homepage: https://www.sourcecodester.com/php/14976/simple-online-college-entrance-exam-system-php-and-sqlite-free-source-code.html Software Link:...

Simple Online College Entrance Exam System 1.0 - Unauthenticated Admin Creation

Exploit Title: Simple Online College Entrance Exam System 1.0 - Unauthenticated Admin Creation Date: 07.10.2021 Exploit Author: Amine ismail @aminei Vendor Homepage: https://www.sourcecodester.com/php/14976/simple-online-college-entrance-exam-system-php-and-sqlite-free-source-code.html Software...

Simple Online College Entrance Exam System 1.0 SQL Injection

Exploit Title: Simple Online College Entrance Exam System 1.0 - 'Multiple' SQL injection Date: 07.10.2021 Exploit Author: Amine ismail @aminei Vendor Homepage: https://www.sourcecodester.com/php/14976/simple-online-college-entrance-exam-system-php-and-sqlite-free-source-code.html Software Link:...

Simple Online College Entrance Exam System 1.0 - Account Takeover

Exploit Title: Simple Online College Entrance Exam System 1.0 - Account Takeover Date: 07.10.2021 Exploit Author: Amine ismail @aminei Vendor Homepage: https://www.sourcecodester.com/php/14976/simple-online-college-entrance-exam-system-php-and-sqlite-free-source-code.html Software Link:...

Simple Online College Entrance Exam System 1.0 - SQLi Authentication Bypass

Exploit Title: Simple Online College Entrance Exam System 1.0 - SQLi Authentication Bypass Date: 07.10.2021 Exploit Author: Mevlüt Yılmaz Vendor Homepage: https://www.sourcecodester.com/php/14976/simple-online-college-entrance-exam-system-php-and-sqlite-free-source-code.html Software Link:...

CVE-2021-20115

A reflected cross-site scripting vulnerability exists in TCExam = 14.8.3. The paths provided in the f, d, and dir parameters in tcefilemanager.php were not properly validated and could cause reflected XSS via the unsanitized output of the path supplied. An attacker could craft a malicious link...

Tecnick.com TCExam 跨站脚本漏洞

Tecnick.com TCExam is a Web-based open source e-exam system from Tecnick.com, UK. The system is primarily used for online exams, among other things. A security vulnerability exists in Tecnick.com TCExam, which stems from a reflected cross-site scripting vulnerability in TCExam prior to version...

CVE-2021-20112

A stored cross-site scripting vulnerability exists in TCExam = 14.8.1. Valid files uploaded via tceselectmediafile.php with a filename beggining with a period will be rendered as text/html. An attacker with access to tceselectmediafile.php could upload a malicious javascript payload which would b...

CVE-2021-20114

When installed following the default/recommended settings, TCExam = 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which included sensitive database backup files...

File upload vulnerability in Exam Hall Management System (CNVD-2021-51846)

Exam Hall Management System is a PHP project that automates the process of exam assignment and seating arrangements. A file upload vulnerability exists in Exam Hall Management System, which can be exploited by an attacker to upload a webshell and gain server privileges...

File Upload Vulnerability in Exam Hall Management System

Exam Hall Management System is a PHP project that automates the process of exam assignment and seating arrangements. A file upload vulnerability exists in Exam Hall Management System, which can be exploited by an attacker to upload a webshell and gain server privileges...

U Exam has information leakage vulnerability

U Exam is an online exam system. There is an information disclosure vulnerability in You Exam. An attacker can exploit the vulnerability to obtain sensitive information...

DivideAndScan - Divide Full Port Scan Results And Use It For Targeted Nmap Runs

DivideEt Impera And Scan and also merge the scan results D ivideA ndS can is used to efficiently automate port scanning routine by splitting it into 3 phases: 1. Discover open ports for a bunch of targets. 2. Run Nmap individually for each target with version grabbing and NSE actions. 3. Merge th...

Unauthorized Access Vulnerability in Teach's WEB Exam System

After 13 years of accumulation and precipitation of education technology, Fuxin Teach's Beginning Technology Development Co., Ltd. focuses on the development of examination system software, and is one of the few professional examination system developers in China. There is an unauthorized access...

OpenEMR SQL注入漏洞

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A SQL injection vulnerability exists in interface/forms/eyemag/save.php in OpenEMR version 5.0.2.1. No details of the vulnerability are provided at this time...

File Upload Vulnerability in WVJT Exam Platform

Ltd. is an advocate of computer-aided assessment and examination technology in China, specializing in the field of assessment and examination. A file upload vulnerability exists in the W3C test platform, which can be exploited by attackers to gain control of the server...

SQL Injection Vulnerability in Medical Online Exam System

Ltd. is a high-tech company dedicated to the research, development and sales of software products in the medical science and education industry. SQL injection vulnerability exists in Medical Online Exam System. An attacker can exploit the vulnerability to obtain sensitive information in the...

SQL Injection Vulnerability in Xinzhongbo Exam Service Platform (Campus Edition) of Hebei Xinzhongbo Education Technology Co.

XinZhongBo Exam Service Platform Campus Edition is a collection of online marking as well as results query platform. Hebei Xinzhongbo Education Technology Co. Xinzhongbo Exam Service Platform Campus Edition has a SQL injection vulnerability that can be exploited by attackers to gain control of th...

XSS vulnerability in PHPEMS online practice exam system (CNVD-2021-26026)

PHPEMS online mock exam system is based on PHP Mysql development of an open source and free PHP paperless mock exam system. PHPEMS Online Mock Exam System has an xss vulnerability that can be exploited by attackers to obtain user cookies...

SQL Injection Vulnerability in Tianrun Shunteng Online Test System

Tianrun Shunteng Online Exam System is an exam system designed for multi-industry online schools. Tianrun Shunteng Online Exam System suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...