CVE-2021-20115

A reflected cross-site scripting vulnerability exists in TCExam = 14.8.3. The paths provided in the f, d, and dir parameters in tcefilemanager.php were not properly validated and could cause reflected XSS via the unsanitized output of the path supplied. An attacker could craft a malicious link...

Tecnick.com TCExam 跨站脚本漏洞

Tecnick.com TCExam is a Web-based open source e-exam system from Tecnick.com, UK. The system is primarily used for online exams, among other things. A security vulnerability exists in Tecnick.com TCExam, which stems from a reflected cross-site scripting vulnerability in TCExam prior to version...

CVE-2021-20112

A stored cross-site scripting vulnerability exists in TCExam = 14.8.1. Valid files uploaded via tceselectmediafile.php with a filename beggining with a period will be rendered as text/html. An attacker with access to tceselectmediafile.php could upload a malicious javascript payload which would b...

CVE-2021-20114

When installed following the default/recommended settings, TCExam = 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which included sensitive database backup files...

File Upload Vulnerability in Exam Hall Management System

Exam Hall Management System is a PHP project that automates the process of exam assignment and seating arrangements. A file upload vulnerability exists in Exam Hall Management System, which can be exploited by an attacker to upload a webshell and gain server privileges...

File upload vulnerability in Exam Hall Management System (CNVD-2021-51846)

Exam Hall Management System is a PHP project that automates the process of exam assignment and seating arrangements. A file upload vulnerability exists in Exam Hall Management System, which can be exploited by an attacker to upload a webshell and gain server privileges...

CVE-2021-24368: Improper Neutralization of Input During Web Page Generation

The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin WordPress plugin before 7.1.18 did not sanitise or escape its resultid parameter when displaying an existing quiz result page, leading to a reflected Cross-Site Scripting issue. This could allow for privilege escalation by inducing a...

U Exam has information leakage vulnerability

U Exam is an online exam system. There is an information disclosure vulnerability in You Exam. An attacker can exploit the vulnerability to obtain sensitive information...

DivideAndScan - Divide Full Port Scan Results And Use It For Targeted Nmap Runs

DivideEt Impera And Scan and also merge the scan results D ivideA ndS can is used to efficiently automate port scanning routine by splitting it into 3 phases: 1. Discover open ports for a bunch of targets. 2. Run Nmap individually for each target with version grabbing and NSE actions. 3. Merge th...

Unauthorized Access Vulnerability in Teach's WEB Exam System

After 13 years of accumulation and precipitation of education technology, Fuxin Teach's Beginning Technology Development Co., Ltd. focuses on the development of examination system software, and is one of the few professional examination system developers in China. There is an unauthorized access...

OpenEMR SQL注入漏洞

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A SQL injection vulnerability exists in interface/forms/eyemag/save.php in OpenEMR version 5.0.2.1. No details of the vulnerability are provided at this time...

File Upload Vulnerability in WVJT Exam Platform

Ltd. is an advocate of computer-aided assessment and examination technology in China, specializing in the field of assessment and examination. A file upload vulnerability exists in the W3C test platform, which can be exploited by attackers to gain control of the server...

SQL Injection Vulnerability in Medical Online Exam System

Ltd. is a high-tech company dedicated to the research, development and sales of software products in the medical science and education industry. SQL injection vulnerability exists in Medical Online Exam System. An attacker can exploit the vulnerability to obtain sensitive information in the...

SQL Injection Vulnerability in Xinzhongbo Exam Service Platform (Campus Edition) of Hebei Xinzhongbo Education Technology Co.

XinZhongBo Exam Service Platform Campus Edition is a collection of online marking as well as results query platform. Hebei Xinzhongbo Education Technology Co. Xinzhongbo Exam Service Platform Campus Edition has a SQL injection vulnerability that can be exploited by attackers to gain control of th...

XSS vulnerability in PHPEMS online practice exam system (CNVD-2021-26026)

PHPEMS online mock exam system is based on PHP Mysql development of an open source and free PHP paperless mock exam system. PHPEMS Online Mock Exam System has an xss vulnerability that can be exploited by attackers to obtain user cookies...

SQL Injection Vulnerability in Tianrun Shunteng Online Test System

Tianrun Shunteng Online Exam System is an exam system designed for multi-industry online schools. Tianrun Shunteng Online Exam System suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Online Exam System With Timer 1.0 SQL Injection

Exploit Title: Online Exam System With Timer 1.0 - 'email' SQL injection Auth Bypass Date: 2021-02-18 Exploit Author: Suresh Kumar Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/13877/online-exam-timer.html Tested On: Windows 10 Pro 10.0.18363 N...

Online Exam System With Timer 1.0 - 'email' SQL injection Auth Bypass

Exploit Title: Online Exam System With Timer 1.0 - 'email' SQL injection Auth Bypass Date: 2021-02-18 Exploit Author: Suresh Kumar Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/13877/online-exam-timer.html Tested On: Windows 10 Pro 10.0.18363 N...

Online Exam System With Timer 1.0 - (email) SQL injection Auth Bypass Vulnerability

Exploit Title: Online Exam System With Timer 1.0 - 'email' SQL injection Auth Bypass Exploit Author: Suresh Kumar Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/13877/online-exam-timer.html Tested On: Windows 10 Pro 10.0.18363 N/A Build 18363 +...

Driver's License windows client has dll hijacking vulnerability

Driver's License is traffic regulations learning software. A dll hijacking vulnerability exists in the Driving Exam Bao Dian windows client. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...