433 matches found
CVE-2021-46307
An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php...
CVE-2021-46307
An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php...
Sql injection
An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php...
CVE-2021-46307
CVE-2021-46307 affects the Projectworlds Online Examination System 1.0 . The vulnerability is an SQL injection in the parameter eid of the page account.php , caused by insufficient input filtering. The CVSS metrics indicate a CRITICAL risk (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; base scor...
CVE-2021-46307
An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php...
Online Examination System Project 1.0 SQL Injection
Title: Online Examination System Project 1.0 SQL - Injections Author: nu11secur1ty Date: 01.10.2022 Vendor: https://projectworlds.in/free-projects/php-projects/ Software: https://projectworlds.in/free-projects/php-projects/online-examination/ Description: The eid parameter in account.php from...
Online Examination System Project 1.0 SQL Injection Vulnerability
Title: Online Examination System Project 1.0 SQL - Injections Author: nu11secur1ty Vendor: https://projectworlds.in/free-projects/php-projects/ Software: https://projectworlds.in/free-projects/php-projects/online-examination/ Description: The eid parameter in account.php from Online Examination...
The vulnerability of the electronic examination system TCExam arises from the lack of measures taken to protect the structure of the web page. This allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the electronic examination system TCExam exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information through a specially...
Projectworlds Online Examination System Cross-Site Request Forgery Vulnerability
Projectworlds Online Examination System is an online examination system. projectworlds Online Examination System cross-site request forgery vulnerability, which can be exploited by attackers to delete existing users...
Project Worlds Online Examination System Cross-Site Scripting Vulnerability
Project Worlds Online Examination System is an online examination system. version 1.0 of ProjectWorlds College Management System is vulnerable to a cross-site scripting vulnerability that could be exploited to inject malicious JavaScript code to execute and steal user credentials...
CVE-2020-26006
Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting XSS via account.php...
CVE-2020-25411
Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user...
Cross site scripting
Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting XSS via account.php...
CVE-2020-26006
Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting XSS via account.php...
CVE-2020-26006
Project Worlds Online Examination System 1.0 is vulnerable to Cross-Site Scripting (XSS) via account.php. Multiple sources (NVD CVE-2020-26006; CNVD/CNNVD entries) confirm an XSS vulnerability in this version, enabling injection of malicious JavaScript to execute in a user’s browser and potential...
CVE-2020-25411
Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user...
CVE-2020-25411
CVE-2020-25411 : Projectworlds Online Examination System 1.0 is vulnerable to Cross-Site Request Forgery (CSRF) , allowing a remote attacker to delete an existing user. Connected documents corroborate the CSRF root cause and the impact as user deletion. No concrete technical details (endpoints, p...
Project Worlds Online Examination System 跨站请求伪造漏洞
Projectworlds Online Examination System is an online examination system. projectworlds Online Examination System cross-site request forgery vulnerability, which can be exploited by attackers to delete existing users...
SourceCodester Online Examination System Cross-Site Scripting Vulnerability
SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. in the United States. Worlds Online Examination System 1.0 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to inject arbitrary code via the name field...