CVE-2017-18602

The examapp plugin 1.0 for WordPress has SQL injection via the wp-admin/admin.php?page=examappUserResult id parameter...

EUVD-2017-9714

Malware in sbrugna...

EUVD-2017-9715

Malware in sbrugna...

CVE-2017-18601

The examapp plugin 1.0 for WordPress has XSS via exam input text fields...

CVE-2017-18601

The examapp plugin 1.0 for WordPress has XSS via exam input text fields...

CVE-2017-18602

The examapp plugin 1.0 for WordPress has SQL injection via the wp-admin/admin.php?page=examappUserResult id parameter...

Design/Logic Flaw

The examapp plugin 1.0 for WordPress has XSS via exam input text fields...

CVE-2017-18602

CVE-2017-18602 affects the WordPress examapp plugin 1.0, with an SQL injection via wp-admin/admin.php?page=examapp_UserResult id. Red Hat and NVD entries confirm the vulnerability in the examapp_UserResult parameter; exploit references (e.g., Exploit-DB) show authenticated SQL injection activity ...

PT-2019-8532

Name of the Vulnerable Software and Affected Versions examapp plugin version 1.0 for WordPress Description The issue concerns a cross-site scripting XSS flaw via exam input text fields. This allows for potential malicious script injection. No information is provided about the estimated number of...

CVE-2017-18602: Improper Neutralization of Special Elements used in an SQL Command

The examapp plugin 1.0 for WordPress has SQL injection via the wp-admin/admin.php?page=examappUserResult id parameter...

CVE-2017-18601: Improper Neutralization of Input During Web Page Generation

The examapp plugin 1.0 for WordPress has XSS via exam input text fields...

PT-2019-8533

Name of the Vulnerable Software and Affected Versions examapp plugin version 1.0 for WordPress Description The issue concerns SQL injection via the id parameter in the "wp-admin/admin.php?page=examapp UserResult" API endpoint. This allows for potential exploitation. No information is provided abo...

WordPress Plugin IBPS Online Exam <= 1.0 - Authenticated SQL Injection / Cross-Site Scripting

Exploit Author: 8bitsec Contact Author: https://twitter.com/8bitsec Stored XSS on exam input textfields and Blind SQL Injection on 'examappUserResult' page 'id' parameter. Authenticated Stored XSS: Logged as a student: Write the payload in the input textfields while attempting an exam. The payloa...