Sql injection

A vulnerability classified as critical was found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index3.php of the component POST Parameter Handler. The manipulation of the argument password leads to sql...

CVE-2023-1039 SourceCodester Class and Exam Timetabling System POST Parameter index3.php sql injection

A vulnerability classified as critical was found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index3.php of the component POST Parameter Handler. The manipulation of the argument password leads to sql...

CVE-2023-1039

CVE-2023-1039 affects SourceCodester Class and Exam Timetabling System 1.0. The vulnerability exists in the POST Parameter Handler for /admin/index3.php, where manipulation of the password parameter enables SQL injection. The issue is exploitable remotely and has been disclosed publicly. Affected...

SUSE CVE-2012-4601

Multiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the 1 usergroups parameter to admin/code/tceedittest.php or 2 subjectid parameter to...

SQL Injection Vulnerability in Far Autumn Medical Online Exam System (CNVD-2023-19468)

Chongqing Yuanqiu Technology Co., Ltd. is the first large-scale intelligence service organization specializing in medical information collection and medical database development in China. There is a SQL injection vulnerability in the Yuanqiu Medical Online Exam System, which can be exploited by...

TomExam Cross-Site Scripting Vulnerability

TomExam is a free and efficient online exam system software. TomExam version 3.0 suffers from a cross-site scripting XSS vulnerability that can be exploited by an attacker to cause cross-site scripting XSS via the pname parameter passed to list.thtml...

CVE-2022-42199

Simple Exam Reviewer Management System v1.0 is vulnerable to Cross Site Request Forgery CSRF via the Exam List...

CVE-2022-42199

Simple Exam Reviewer Management System v1.0 is vulnerable to Cross Site Request Forgery CSRF via the Exam List...

CVE-2022-42200

Simple Exam Reviewer Management System v1.0 is vulnerable to Stored Cross Site Scripting XSS via the Exam List...

CVE-2022-42201

Simple Exam Reviewer Management System v1.0 is vulnerable to Insecure file upload...

CVE-2022-42197

In Simple Exam Reviewer Management System v1.0 the User List function has improper access control that allows low privileged users to modify user permissions to higher privileges...

CVE-2022-42198

In Simple Exam Reviewer Management System v1.0 the User List function suffers from insecure file upload...

CVE-2022-42200

Simple Exam Reviewer Management System v1.0 is vulnerable to Stored Cross Site Scripting XSS via the Exam List...

Cross site scripting

Simple Exam Reviewer Management System v1.0 is vulnerable to Stored Cross Site Scripting XSS via the Exam List...

Cross site request forgery (csrf)

Simple Exam Reviewer Management System v1.0 is vulnerable to Cross Site Request Forgery CSRF via the Exam List...

PT-2022-26307 · Unknown · Simple Exam Reviewer Management System

Name of the Vulnerable Software and Affected Versions: Simple Exam Reviewer Management System version 1.0 Description: The issue concerns a Cross Site Request Forgery CSRF vulnerability via the Exam List. This means an attacker could potentially trick a user into performing unintended actions on...

PT-2022-26309 · Unknown · Simple Exam Reviewer Management System

Name of the Vulnerable Software and Affected Versions: Simple Exam Reviewer Management System version 1.0 Description: The issue concerns Stored Cross Site Scripting XSS via the Exam List. This means an attacker can inject malicious scripts into the Exam List, which can then be executed by other...

CVE-2022-42199

Simple Exam Reviewer Management System v1.0 is vulnerable to Cross Site Request Forgery CSRF via the Exam List...

CVE-2022-42198

In Simple Exam Reviewer Management System v1.0 the User List function suffers from insecure file upload...

Simple Exam Reviewer Management System 代码问题漏洞

Simple Exam Reviewer Management System is a Simple Exam Reviewer Management System by Carlo Montero Personal Developer. A security vulnerability exists in Simple Exam Reviewer Management System that originates from vulnerability to unsecured file uploads...