433 matches found
CVE-2023-36256
The Online Examination System Project 1.0 version is vulnerable to Cross-Site Request Forgery CSRF attacks. An attacker can craft a malicious link that, when clicked by an admin user, will delete a user account from the database without the admin's consent. The email of the user to be deleted is...
CVE-2023-36256
CVE-2023-36256 affects The Online Examination System Project 1.0. The vulnerability is a CSRF flaw where an attacker can craft a malicious link that, when clicked by an admin, deletes a user account from the database via a URL parameter (email). This can cause data loss and does not require admin...
Online Examination System Project 1.0 Cross Site Request Forgery
Exploit Title: Online Examination System Project 1.0 - Cross-site request forgery CSRF Google Dork: n/a Date: 09/06/2023 Exploit Author: Ramil Mustafayev kryptohaker Vendor Homepage: https://github.com/projectworldsofficial/online-examination-systen-in-php Software Link:...
Online Examination System Project 1.0 - Cross-site request forgery Vulnerability
Exploit Title: Online Examination System Project 1.0 - Cross-site request forgery CSRF Exploit Author: Ramil Mustafayev kryptohaker Vendor Homepage: https://github.com/projectworldsofficial/online-examination-systen-in-php Software Link:...
CVE-2022-42066
Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php...
CVE-2022-42066
Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php...
Cross site scripting
Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php...
CVE-2022-42066
Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php...
PT-2022-26229 · Unknown · Online Examination System
Name of the Vulnerable Software and Affected Versions: Online Examination System version 1.0 Description: The issue is related to a cross-site scripting vulnerability. It can be exploited via the index.php file. Recommendations: For Online Examination System version 1.0, consider disabling access...
CVE-2022-42066
CVE-2022-42066 affects Online Examination System version 1.0, with a cross-site scripting vulnerability exploitable via index.php. The issue is a client-side input handling flaw that can expose confidentiality and integrity risks (per CVSS data: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Exploitation ...
CVE-2022-42066
Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php...
Online Examination System 跨站脚本漏洞
Sourcecodester SourceCodester Online Examination System is an online examination system from Sourcecodester, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Online Examination System, which stems from its index.php component that allows an attacker to implement reflective...
Online Examination System 1.0 Cross Site Scripting Vulnerability
Exploit Title: Online Examination System - Cross site scripting Reflected Exploit Author: yousef alraddadi - https://twitter.com/y0usef11 Vendor Homepage: https://projectworlds.in/free-projects/php-projects/online-examination/ Software Link:...
Online Examination System 1.0 SQL Injection Vulnerability
Exploit Title: Online Examination System - SQL Injection Exploit Author: yousef alraddadi - https://twitter.com/y0usef11 Vendor Homepage: https://projectworlds.in/free-projects/php-projects/online-examination/ Software Link:...
CVE-2021-46086
xzs-mysql = t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destro...
CVE-2021-46086
xzs-mysql = t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destro...
CVE-2021-46086
The CVE-2021-46086 entry affects Mindskip xzs-mysql (version >= t3.4.0). The vulnerability arises from insecure permissions in the submission function of the online examination system, enabling an attacker to modify packet parameters and corrupt real data. Documents indicate an unsafe vulnerab...
Mindskip xzs-mysql 权限许可和访问控制问题漏洞
Mindskip xzs-mysql is a java + vue front-end and back-end separation of the examination system from Wuhan, China Mindskip technology Mindskip company. The main advantages are simple and fast development and deployment, friendly interface design and clear code structure. Support web end and wechat...
SourceCodester Online Examination System SQL Injection Vulnerability
SourceCodester Projectworlds Online Examination System is an online examination system from SourceCodester, Inc. v1.0 contains a SQL injection vulnerability that stems from the failure of the eid parameter in the product's account.php page to properly filter special characters in user input data...
