1210 matches found
Tecnick TCExam 跨站脚本漏洞
Tecnick TCExam is a Web-based open source e-exam system from the UK company Tecnick. The system is mainly used for online exams, etc. A cross-site scripting vulnerability exists in Tecnick TCExam version 16.3.2, which stems from vulnerability to multiple cross-site scripting attacks...
📄 Online Exam Mastering System 1.0 Cross Site Scripting
Online Exam Mastering System version 1.0 suffers from a cross site scripting vulnerability. Exploit Title: code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting XSS Google Dork: inurl:/exam/feedback.php Date: 2025-04-19 Exploit Author: Pruthu Raut Vendor Homepage:...
code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting (XSS)
Exploit Title: code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting XSS Google Dork: inurl:/exam/feedback.php Date: 2025-04-19 Exploit Author: Pruthu Raut Vendor Homepage: https://code-projects.org/ Software Link:...
CVE-2025-28121
code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...
CVE-2025-28121
code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...
PT-2025-17438 · Unknown · Code-Projects Online Exam Mastering System
Name of the Vulnerable Software and Affected Versions: code-projects Online Exam Mastering System version 1.0 Description: The issue concerns a Cross Site Scripting XSS vulnerability in the feedback.php file via the q parameter, allowing remote attackers to execute arbitrary code. Recommendations...
CVE-2025-28121
code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...
Code-Projects Online Exam Mastering System 安全漏洞
Code-Projects Online Exam Mastering System is a Code-Projects open source online exam system. A security vulnerability exists in Code-Projects Online Exam Mastering System version 1.0, which originates from cross-site scripting in the q parameter of feedback.php and could lead to the execution of...
CVE-2025-28121
code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...
CVE-2025-28121
CVE-2025-28121 affects code-projects Online Exam Mastering System 1.0. The vulnerability is a reflected Cross-Site Scripting (XSS) in feedback.php via the q parameter, where input is reflected without proper sanitization. Exploitation PoCs and public writeups (e.g., Exploit-DB, PacketStorm, GitHu...
CVE-2025-28087
Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php...
CVE-2025-28087
Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php...
CVE-2025-28087
Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php...
Sourcecodester Online Exam System 安全漏洞
Sourcecodester Online Exam System is a SourceCodester open source online exam system. A security vulnerability exists in Sourcecodester Online Exam System version 1.0, which originates from a SQL injection in dash.php...
CVE-2025-28087
Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php...
CVE-2025-28087
Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php...
PT-2025-13580 · Unknown · Sourcecodester Online Exam System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Exam System version 1.0 Description: The issue is related to SQL Injection via the dash.php file. This allows for potential exploitation. Recommendations: For Sourcecodester Online Exam System version 1.0, consider...
CVE-2025-28087
CVE-2025-28087 affects Sourcecodester Online Exam System 1.0. The dash.php SQL injection vulnerability allows remote, unauthenticated access with high impact on confidentiality, integrity, and availability (CVSSv3.1: 9.8). ADP notes a PoC exploit is available; no patch/version remediation is spec...
CVE-2025-2392
A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/activate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...