1527 matches found
PT-2023-20795 · Unknown · Cleverstupiddog Yf-Exam
Name of the Vulnerable Software and Affected Versions: CleverStupidDog yf-exam version 1.8.0 Description: The issue is related to SQL Injection. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...
CVE-2023-26780: Improper Neutralization of Special Elements used in an SQL Command
CleverStupidDog yf-exam v 1.8.0 is vulnerable to SQL Injection...
CVE-2023-26780
CVE-2023-26780 affects CleverStupidDog yf-exam v1.8.0. The connected documents describe a SQL Injection vulnerability with high impact (CVSS 3.1: 9.8, NETWORK attack vector, no user interaction). No explicit remediation details are provided in the sources; one entry notes there is no information ...
CVE-2023-1039
A vulnerability classified as critical was found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index3.php of the component POST Parameter Handler. The manipulation of the argument password leads to sql...
Sql injection
A vulnerability classified as critical was found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index3.php of the component POST Parameter Handler. The manipulation of the argument password leads to sql...
CVE-2023-1039
CVE-2023-1039 affects SourceCodester Class and Exam Timetabling System 1.0. The vulnerability exists in the POST Parameter Handler for /admin/index3.php, where manipulation of the password parameter enables SQL injection. The issue is exploitable remotely and has been disclosed publicly. Affected...
CVE-2023-1039 SourceCodester Class and Exam Timetabling System POST Parameter index3.php sql injection
A vulnerability classified as critical was found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index3.php of the component POST Parameter Handler. The manipulation of the argument password leads to sql...
CVE-2023-1039: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index3.php of the component POST Parameter Handler. The manipulation of the argument password leads to sql...
SUSE CVE-2012-4601
Multiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the 1 usergroups parameter to admin/code/tceedittest.php or 2 subjectid parameter to...
CVE-2022-46862: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin = 8.0.7 versions...
SQL Injection Vulnerability in Far Autumn Medical Online Exam System (CNVD-2023-19468)
Chongqing Yuanqiu Technology Co., Ltd. is the first large-scale intelligence service organization specializing in medical information collection and medical database development in China. There is a SQL injection vulnerability in the Yuanqiu Medical Online Exam System, which can be exploited by...
TomExam Cross-Site Scripting Vulnerability
TomExam is a free and efficient online exam system software. TomExam version 3.0 suffers from a cross-site scripting XSS vulnerability that can be exploited by an attacker to cause cross-site scripting XSS via the pname parameter passed to list.thtml...
CVE-2022-42200
Simple Exam Reviewer Management System v1.0 is vulnerable to Stored Cross Site Scripting XSS via the Exam List...
CVE-2022-42197
In Simple Exam Reviewer Management System v1.0 the User List function has improper access control that allows low privileged users to modify user permissions to higher privileges...
CVE-2022-42199
Simple Exam Reviewer Management System v1.0 is vulnerable to Cross Site Request Forgery CSRF via the Exam List...
CVE-2022-42201
Simple Exam Reviewer Management System v1.0 is vulnerable to Insecure file upload...
CVE-2022-42198
In Simple Exam Reviewer Management System v1.0 the User List function suffers from insecure file upload...
CVE-2022-42200
Simple Exam Reviewer Management System v1.0 is vulnerable to Stored Cross Site Scripting XSS via the Exam List...