Online Exam System SQL注入漏洞

Online Exam System is an online exam system by oretnom23 individual developers. A SQL injection vulnerability exists in SourceCodester Online Exam System version 1.0, which stems from a problem with the file /matkul/data of the component POST Parameter Handler, where manipulation of the parameter...

CVE-2023-2642

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. This affects an unknown part of the file adminpanel/admin/faceboxmodal/updateCourse.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possibl...

CVE-2023-2642

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. This affects an unknown part of the file adminpanel/admin/faceboxmodal/updateCourse.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possibl...

Sql injection

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. This affects an unknown part of the file adminpanel/admin/faceboxmodal/updateCourse.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possibl...

CVE-2023-2642 SourceCodester Online Exam System GET Parameter updateCourse.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. This affects an unknown part of the file adminpanel/admin/faceboxmodal/updateCourse.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possibl...

CVE-2023-2642

CVE-2023-2642 is a SQL injection vulnerability affecting SourceCodester Online Exam System 1.0. The issue resides in the file adminpanel/admin/facebox_modal/updateCourse.php, specifically in the GET Parameter Handler where manipulating the id argument enables an SQL injection. The vulnerability c...

CVE-2023-2642 SourceCodester Online Exam System GET Parameter updateCourse.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. This affects an unknown part of the file adminpanel/admin/faceboxmodal/updateCourse.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possibl...

SourceCodester Online Exam System SQL注入漏洞

Online Exam System is an online exam system by oretnom23 individual developers. SourceCodester Online Exam System version 1.0 suffers from a SQL injection vulnerability that originates from a problem in the file adminpanel/admin/faceboxmodal/updateCourse.php, where manipulation of the parameter i...

PT-2023-20622 · Unknown · Sourcecodester Online Exam System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam System version 1.0 Description: A critical issue has been found in the SourceCodester Online Exam System. This issue affects the file adminpanel/admin/facebox modal/updateCourse.php, specifically the GET Parameter...

CVE-2023-22681

Cross-Site Request Forgery CSRF vulnerability in Aarvanshinfotech Online Exam Software: eExamhall plugin = 4.0 versions...

CVE-2023-22681

Cross-Site Request Forgery CSRF vulnerability in Aarvanshinfotech Online Exam Software: eExamhall plugin = 4.0 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Aarvanshinfotech Online Exam Software: eExamhall plugin = 4.0 versions...

CVE-2023-22681 WordPress Online Exam Software : eExamhall Plugin <= 4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Aarvanshinfotech Online Exam Software: eExamhall plugin = 4.0 versions...

CVE-2023-22681

CVE-2023-22681 describes a CSRF vulnerability in Aarvanshinfotech Online Exam Software: eExamhall plugin versions

PT-2023-18626 · Aarvanshinfotech · Eexamhall

Name of the Vulnerable Software and Affected Versions: Aarvanshinfotech Online Exam Software: eExamhall plugin versions = 4.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended...

CVE-2023-26779

CleverStupidDog yf-exam v 1.8.0 is vulnerable to Deserialization which can lead to remote code execution RCE...

CVE-2023-25403

CleverStupidDog yf-exam v 1.8.0 is vulnerable to Authentication Bypass. The program uses a fixed JWT key, and the stored key uses username format characters. Any user who logged in within 24 hours. A token can be forged with his username to bypass authentication...

CVE-2023-26779

CleverStupidDog yf-exam v 1.8.0 is vulnerable to Deserialization which can lead to remote code execution RCE...

CVE-2023-25402

CleverStupidDog yf-exam 1.8.0 is vulnerable to File Upload. There is no restriction on the suffix of the uploaded file, resulting in any file upload...

Unrestricted file upload

CleverStupidDog yf-exam 1.8.0 is vulnerable to File Upload. There is no restriction on the suffix of the uploaded file, resulting in any file upload...