PT-2025-38289

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A SQL injection issue exists in SourceCodester Online Exam Form Submission 1.0. Manipulation of the ID argument in the /admin/delete user.php API endpoint can lead to SQL...

CVE-2025-4688

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

CVE-2025-4688

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

CVE-2025-4688

CVE-2025-4688 describes an SQL injection in BGS Interactive SINAV.LINK Exam Result Module (versions before 1.2). The vulnerability stems from improper neutralization of special elements in SQL commands, enabling unauthorized database access with high impact (CVE score: CVSSv3.1 9.8, network attac...

CVE-2025-4688 SQLi in BGS Interactive's SINAV.LINK Exam Result Module

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

CVE-2025-4688 SQLi in BGS Interactive's SINAV.LINK Exam Result Module

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

BGS Interactive SINAV.LINK Exam Result Module SQL注入漏洞

BGS Interactive SINAV.LINK Exam Result Module is a system component of BGS Interactive that manages exam results. A SQL injection vulnerability exists in BGS Interactive SINAV.LINK Exam Result Module versions prior to 1.2, which stems from improper neutralization of a special element and could le...

PT-2025-37913

Name of the Vulnerable Software and Affected Versions: SINAV.LINK Exam Result Module versions prior to 1.2 Description: An improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability exists in the SINAV.LINK Exam Result Module. This issue allows for SQL...

CVE-2025-9238

A vulnerability was determined in Swatadru Exam-Seating-Arrangement up to 97335ccebf95468d92525f4255a2241d2b0b002f. Affected is an unknown function of the file /student.php of the component Student Login. Executing manipulation of the argument email can lead to sql injection. It is possible to...

CVE-2025-9238

CVE-2025-9238 affects the Swatadru Exam-Seating-Arrangement, specifically the Student Login component where the vulnerable function resides in the file /student.php. Manipulating the email argument can lead to a SQL injection, with remote exploitation possible. Multiple sources (NVD, Red Hat, CVE...

CVE-2025-9238 Swatadru Exam-Seating-Arrangement Student Login student.php sql injection

A vulnerability was determined in Swatadru Exam-Seating-Arrangement up to 97335ccebf95468d92525f4255a2241d2b0b002f. Affected is an unknown function of the file /student.php of the component Student Login. Executing manipulation of the argument email can lead to sql injection. It is possible to...

Swatadru Exam-Seating-Arrangement 安全漏洞

Swatadru Exam-Seating-Arrangement is an exam seat reservation system by the individual developer Swatadru Paul. A security vulnerability exists in Swatadru Exam-Seating-Arrangement, which stems from a SQL injection attack due to incorrect manipulation of the parameter email in the file /student.p...

PT-2025-34142

Name of the Vulnerable Software and Affected Versions: Swatadru Exam-Seating-Arrangement up to 97335ccebf95468d92525f4255a2241d2b0b002f Description: A vulnerability exists in Swatadru Exam-Seating-Arrangement. Manipulation of the email argument in the /student.php file within the Student Login...

MAL-2025-20028 Malicious code in exam-service (npm)

The package exam-service was found to contain malicious code...

Malicious code in exam-service (npm)

The package exam-service was found to contain malicious code...

Exam Form Submission update_s7.php file SQL injection vulnerability

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter credits in file /admin/updates7.php. An attacker can exploit this vulnerability to execute illegal SQL...

CVE-2025-8372

A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/updates7.php. The manipulation of the argument credits leads to sql injection. The attack may be launched remotely. The exploit h...

CVE-2025-8371

A vulnerability has been found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/updates5.php. The manipulation of the argument credits leads to sql injection. The attack can be launched remotely. Th...

CVE-2025-8326

A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/deletes7.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

CVE-2025-8327

A vulnerability classified as critical was found in code-projects Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deletes8.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has...