CVE-2020-29258

CVE-2020-29258 is an XSS vulnerability in Online Examination System 1.0, exploitable via the w parameter in index.php. The affected component is the web application’s index.php handling the w query parameter, enabling attacker-supplied script to be reflected to the user. Documented impact is clie...

CVE-2020-29257

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the q parameter to feedback.php...

CVE-2020-29257

CVE-2020-29257: Cross-site scripting in Online Examination System 1.0 (SourceCodester Online Examination System) via the q parameter to feedback.php. Root cause: user input in q is not properly filtered, enabling injection of JavaScript that can execute in the victim’s browser. Documented impact:...

SourceCodester Online Examination System 跨站脚本漏洞

SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. in the United States. SourceCodester Online Examination System 1.0 suffers from a cross-site scripting vulnerability that originates in the w parameter of index.php, which can be exploited by an...

SourceCodester Online Examination System 跨站脚本漏洞

SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Online Examination System, which originates from the q parameter does not filter user input, which can be exploited to execute JavaScrip...

Online Examination System 1.0 Cross Site Scripting

Exploit Title: Online examination system 1.0 - 'name' Stored Cross Site Scripting Date: 29/10/2020 Exploit Author: Nikhil Kumar https://www.linkedin.com/in/nikhil-kumar-4b9443166/ Vendor Homepage: https://github.com/projectworldsofficial/online-examination-systen-in-php Software Link:...

Unauthorized Access Vulnerability in Jinduicheng Molybdenum Group Co.

Jinduicheng Molybdenum Industry Group Co., Ltd. is a joint enterprise integrating production and trade, with an annual output of about 12,000 tons of molybdenum metal, which is at the top of the molybdenum industry in China, the first in Asia and the second in the world. The company is located in...

SQL Injection Vulnerability in the sn*** Parameters of the School Worry-Free Online Exam System

School Worry-free online examination system adopts the Internet technology, quickly builds the online examination system platform, comprehensively realizes the network, paperless and automation of the examination work. School Worry-free online examination system sn parameters exist SQL injection...

Online Examination System 1.0 - (eid) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Examination System 1.0 - 'eid' SQL Injection Exploit Author: BKpatron Vendor Homepage: https://www.sourcecodester.com/php/14210/online-examination-system-project-using-phpmysql.html Software Link:...

Online Examination System 1.0 SQL Injection

Exploit Title: Online Examination System 1.0 - 'eid' SQL Injection Google Dork: N/A Date: 2020-05-16 Exploit Author: BKpatron Vendor Homepage: https://www.sourcecodester.com/php/14210/online-examination-system-project-using-phpmysql.html Software Link:...

Online Examination System 1.0 - 'eid' SQL Injection

Exploit Title: Online Examination System 1.0 - 'eid' SQL Injection Google Dork: N/A Date: 2020-05-16 Exploit Author: BKpatron Vendor Homepage: https://www.sourcecodester.com/php/14210/online-examination-system-project-using-phpmysql.html Software Link:...

Laboratory Safety Education and Examination System Has Logic Flaw Vulnerability

Tsinghua University Informatization Technology Center is established by Tsinghua University to undertake the operation service and construction development of the university's informatization infrastructure and to provide protection for the university's informatization construction and service. A...

TI Online Examination System 2 Arbitrary File Download

Exploit Title: TI Online Examination System v2 - Arbitrary File Download Dork: N/A Date: 02.08.2018 Exploit Author: Azkan Mustafa AkkuA AkkuS Vendor Homepage: https://codecanyon.net/item/ti-online-examination-system-v2/11248904 Version: 2.0 Category: Webapps Tested on: Kali linux Description : Th...

TI Online Examination System v2 - Arbitrary File Download

Exploit Title: TI Online Examination System v2 - Arbitrary File Download Dork: N/A Date: 02.08.2018 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://codecanyon.net/item/ti-online-examination-system-v2/11248904 Version: 2.0 Category: Webapps Tested on: Kali linux Description : Th...

TI Online Examination System 2.0 Admin Password Changer Exploit

Exploit for php platform in category web applications !/usr/bin/perl ------------------------------------------------------------------------ + TI Online Examination System 2.0 Admin Password Changer Exploit ------------------------------------------------------------------------ Discovered by Ju...

TI Online Examination System 2.0 Admin Login Bypass Vulnerability

Exploit for php platform in category web applications --------------------------------------------------------------------------------------- + TI Online Examination System = 2.0 sql injection Admin Login Bypass -------------------------------------------------------------------------------------...

Cookie Spoofing Vulnerability in Nanjing Guanbao Technology Development Co.

Nanjing Guanbao Technology Development Co. Guanbao online examination system is a comprehensive examination system. A cookie spoofing vulnerability exists in Nanjing Guanbao Technology Development Co. This vulnerability allows an attacker to forge a cookie to gain access to the corresponding...

Arbitrary File Download Vulnerability in Nanjing Guanbao Technology Development Co.

Nanjing Guanbao Technology Development Co. Guanbao online examination system is a comprehensive examination system. An arbitrary file download vulnerability exists in the Nanjing Guanbao Technology Development Co. The vulnerability exists because FileInfo fails to perform any operation on the tex...

TI Online Examination System 2.0 - SQL Injection

TI Online Examination System 2.0 - SQL Injection Exploit Title: TI Online Examination System v2.0 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://textusintentio.com/ Software Buy: https://codecanyon.net/item/ti-online-examination-system-v2/11248904 Demo:...

TI Online Examination System 2.0 SQL Injection

Exploit Title: TI Online Examination System v2.0 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://textusintentio.com/ Software Buy: https://codecanyon.net/item/ti-online-examination-system-v2/11248904 Demo: http://oesv2.textusintentio.com/ Version: 2.0 Tested on: Win7 x64...