1527 matches found
CVE-2022-36220
Kiosk breakout without quit password in Safe Exam Browser Windows 3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog...
CVE-2022-36220
Kiosk breakout without quit password in Safe Exam Browser Windows 3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog...
Design/Logic Flaw
Kiosk breakout without quit password in Safe Exam Browser Windows 3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog...
CVE-2022-36220
CVE-2022-36220 affects Safe Exam Browser for Windows prior to version 3.4.0. The issue is a kiosk breakout vulnerability that allows code execution via the browser’s print dialog when no quit password is required. Root cause: UI/workflow flaw enabling escape from the kiosk environment through the...
CVE-2022-36220
Kiosk breakout without quit password in Safe Exam Browser Windows 3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog...
Safe Exam Browser 安全漏洞
Safe Exam Browser is a secure web browser environment organized by ETH Zurich, Switzerland. It allows secure online exams to be taken. A security vulnerability exists in Safe Exam Browser Windows versions prior to 3.4.0 that originates from a kiosk breakout no exit code and allows an attacker to...
PT-2022-23262
Name of the Vulnerable Software and Affected Versions Safe Exam Browser versions prior to 3.4.0 Description The issue allows an attacker to achieve code execution via the browser's print dialog due to a kiosk breakout vulnerability without requiring a quit password. Recommendations For versions...
CVE-2022-36220: Undefined Security Weakness
Kiosk breakout without quit password in Safe Exam Browser Windows 3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog...
CVE-2022-2379
The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in its REST API, allowing unauthenticated users to retrieve information related to the courses, exams, departments as well as student's grades and PII such as email address, physical address, phone number etc...
CVE-2022-2706
A vulnerability classified as critical has been found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/classsched.php. The manipulation of the argument class with the input '||SELECT 0x684d6b6c WHERE 5993=5993 AND SELECT 2096...
CVE-2022-2707
SourceCodester Online Class and Exam Scheduling System 1.0 is affected by a SQL injection in /pages/faculty_sched.php via the faculty parameter. The root cause is unsafely concatenated user input leading to injection, with remote exploitation demonstrated by public disclosure (VDB-205831). Exploi...
CVE-2022-2707 SourceCodester Online Class and Exam Scheduling System faculty_sched.php sql injection
A vulnerability classified as critical was found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/facultysched.php. The manipulation of the argument faculty with the input ' OR SELECT 2078 FROMSELECT...
CVE-2022-2706 SourceCodester Online Class and Exam Scheduling System class_sched.php sql injection
A vulnerability classified as critical has been found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/classsched.php. The manipulation of the argument class with the input '||SELECT 0x684d6b6c WHERE 5993=5993 AND SELECT 2096...
CVE-2022-2706
CVE-2022-2706 describes a SQL injection in SourceCodester Online Class and Exam Scheduling System 1.0, affecting the /pages/class_sched.php file via the class parameter. The vulnerability arises from input manipulation that allows remote exploitation and arbitrary SQL execution, with public discl...
CVE-2022-2706: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/classsched.php. The manipulation of the argument class with the input '||SELECT 0x684d6b6c WHERE 5993=5993 AND SELECT 2096...
CVE-2022-2707: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/facultysched.php. The manipulation of the argument faculty with the input ' OR SELECT 2078 FROMSELECT...
Prepare for Your Salesforce Certified OmniStudio-Developer Exam
By Owais Sultan The Salesforce OmniStudio Developer certification is specifically designed for those candidates who have skills, experience, and knowledge about… This is a post from HackRead.com Read the original post: Prepare for Your Salesforce Certified OmniStudio-Developer Exam...
Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68959)
Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getexamtimetable.php?id=The page lacks validation for external input SQL statements,...
