PT-2022-26310 · Unknown · Simple Exam Reviewer Management System

Name of the Vulnerable Software and Affected Versions: Simple Exam Reviewer Management System version 1.0 Description: The issue concerns an insecure file upload in the Simple Exam Reviewer Management System. This allows for potential malicious file uploads, which could lead to various security...

CVE-2022-42200: Improper Neutralization of Input During Web Page Generation

Simple Exam Reviewer Management System v1.0 is vulnerable to Stored Cross Site Scripting XSS via the Exam List...

CVE-2022-42201

Simple Exam Reviewer Management System v1.0 is vulnerable to Insecure file upload...

CVE-2022-42201: Unrestricted Upload of File with Dangerous Type

Simple Exam Reviewer Management System v1.0 is vulnerable to Insecure file upload...

CVE-2022-42199: Cross-Site Request Forgery (CSRF)

Simple Exam Reviewer Management System v1.0 is vulnerable to Cross Site Request Forgery CSRF via the Exam List...

PT-2022-26309 · Unknown · Simple Exam Reviewer Management System

Name of the Vulnerable Software and Affected Versions: Simple Exam Reviewer Management System version 1.0 Description: The issue concerns Stored Cross Site Scripting XSS via the Exam List. This means an attacker can inject malicious scripts into the Exam List, which can then be executed by other...

xzs 跨站脚本漏洞

Civic Jump Technology xzs Learning Zest Open Source Exam System is the Learning Zest Open Source Exam System from Civic Jump Technology. A security vulnerability exists in xzs version v3.8.0, which originated from a cross-site scripting XSS vulnerability found in the component /admin/question/edi...

Russian Hacker Arrested in India for Reportedly Helping Students Cheat in JEE-Main Exam

India's Central Bureau of Investigation CBI on Monday disclosed that it has detained a Russian national for allegedly hacking into a software platform used to conduct engineering entrance assessments in the country in 2021. "The said accused was detained by the Bureau of Immigration at Indira...

CVE-2022-40877

Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter...

CVE-2022-40878

In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution RCE...

CVE-2022-40877

Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter...

Sql injection

Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter...

CVE-2022-40877

Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter...

CVE-2022-40877

Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter...

CVE-2022-40877

CVE-2022-40877 concerns the Exam Reviewer Management System 1.0, where the vulnerability is a SQL Injection in the id parameter. The available documents consistently identify the affected software as Exam Reviewer Management System 1.0, with the root cause being lack of input validation in the id...

CVE-2022-40878

In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution RCE...

CVE-2022-40878

In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution RCE...

CVE-2022-40877: Improper Neutralization of Special Elements used in an SQL Command

Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter...

CVE-2022-40878: Unrestricted Upload of File with Dangerous Type

In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution RCE...

PT-2022-25601 · Unknown · Exam Reviewer Management System

Name of the Vulnerable Software and Affected Versions: Exam Reviewer Management System version 1.0 Description: The issue concerns SQL Injection via the id parameter. This allows for potential manipulation of database queries, which could lead to unauthorized data access or modification...