CVE-2017-18602

The examapp plugin 1.0 for WordPress has SQL injection via the wp-admin/admin.php?page=examappUserResult id parameter...

EUVD-2017-9714

Malware in sbrugna...

EUVD-2017-9715

Malware in sbrugna...

CVE-2017-18601

The examapp plugin 1.0 for WordPress has XSS via exam input text fields...

CVE-2017-18602

The examapp plugin 1.0 for WordPress has SQL injection via the wp-admin/admin.php?page=examappUserResult id parameter...

CVE-2017-18601

The examapp plugin 1.0 for WordPress has XSS via exam input text fields...

Design/Logic Flaw

The examapp plugin 1.0 for WordPress has XSS via exam input text fields...

CVE-2017-18602

CVE-2017-18602 affects the WordPress examapp plugin 1.0, with an SQL injection via wp-admin/admin.php?page=examapp_UserResult id. Red Hat and NVD entries confirm the vulnerability in the examapp_UserResult parameter; exploit references (e.g., Exploit-DB) show authenticated SQL injection activity ...

WordPress Plugin IBPS Online Exam <= 1.0 - Authenticated SQL Injection / Cross-Site Scripting

Exploit Author: 8bitsec Contact Author: https://twitter.com/8bitsec Stored XSS on exam input textfields and Blind SQL Injection on 'examappUserResult' page 'id' parameter. Authenticated Stored XSS: Logged as a student: Write the payload in the input textfields while attempting an exam. The payloa...