CVE-2023-45203

CVE-2023-45203 affects Online Examination System v1.0 with open redirect vulnerabilities in the login.php component, exploitable via the q parameter to redirect users to arbitrary sites. Primary impact is user redirection; exploitation details are not described as active in the provided docs. The...

CVE-2023-45202 Online Examination System v1.0 - Multiple Open Redirects

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL...

CVE-2023-45202

CVE-2023-45202 affects Online Examination System v1.0. The issue is multiple Open Redirects in the feed.php resource’s q parameter, enabling an attacker to redirect a victim to an arbitrary website via a crafted URL. Exploitation details are not provided in the sources. The Red Hat and PRION entr...

CVE-2023-45202 Online Examination System v1.0 - Multiple Open Redirects

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL...

CVE-2023-45201 Online Examination System v1.0 - Multiple Open Redirects

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL...

CVE-2023-45201 Online Examination System v1.0 - Multiple Open Redirects

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL...

CVE-2023-45201

CVE-2023-45201 affects Online Examination System v1.0. Multiple open redirect vulnerabilities exist, specifically via the q parameter in the admin.php resource, allowing a crafted URL to redirect a victim to an arbitrary website. The issue is documented across several sources in the connected set...

Project Worlds Online Examination System Input Validation Error Vulnerability

Project Worlds Online Examination System is an online examination system. Project Worlds Online Examination System v1.0 suffers from an input validation error vulnerability that stems from susceptibility to multiple open redirection vulnerabilities that allow an attacker to redirect a victim user...

Project Worlds Online Examination System Input Validation Error Vulnerability

Project Worlds Online Examination System is an online examination system. Project Worlds Online Examination System v1.0 suffers from an input validation error vulnerability that stems from susceptibility to multiple open redirection vulnerabilities that allow an attacker to redirect a victim user...

PT-2023-29454 · Unknown · Online Examination System

Name of the Vulnerable Software and Affected Versions: Online Examination System version 1.0 Description: The issue allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. The 'q' parameter of the "admin.php" resource is vulnerable to Open Redirect attacks...

PT-2023-29455 · Unknown · Online Examination System

Name of the Vulnerable Software and Affected Versions: Online Examination System version 1.0 Description: The issue concerns multiple Open Redirect vulnerabilities. Specifically, the q parameter of the "feed.php" resource is vulnerable, allowing an attacker to redirect a victim user to an arbitra...

CVE-2023-45201: URL Redirection to Untrusted Site

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL...

CVE-2023-45203: URL Redirection to Untrusted Site

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the login.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL...

CVE-2023-45202: URL Redirection to Untrusted Site

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL...

Project Worlds Online Examination System Input Validation Error Vulnerability

Project Worlds Online Examination System is an online examination system. Project Worlds Online Examination System v1.0 suffers from an input validation error vulnerability that stems from susceptibility to multiple open redirection vulnerabilities that allow an attacker to redirect a victim user...

CVE-2023-36256

The Online Examination System Project 1.0 version is vulnerable to Cross-Site Request Forgery CSRF attacks. An attacker can craft a malicious link that, when clicked by an admin user, will delete a user account from the database without the admin's consent. The email of the user to be deleted is...

Project Worlds Online Examination System 跨站请求伪造漏洞

Project Worlds Online Examination System is an online examination system Project Worlds Online Examination System version 1.0 suffers from a cross-site request forgery vulnerability that originates from an attacker being able to craft a malicious link that, when clicked by an administrator user,...

CVE-2023-36256

The Online Examination System Project 1.0 version is vulnerable to Cross-Site Request Forgery CSRF attacks. An attacker can craft a malicious link that, when clicked by an admin user, will delete a user account from the database without the admin's consent. The email of the user to be deleted is...

CVE-2023-36256

CVE-2023-36256 affects The Online Examination System Project 1.0. The vulnerability is a CSRF flaw where an attacker can craft a malicious link that, when clicked by an admin, deletes a user account from the database via a URL parameter (email). This can cause data loss and does not require admin...

CVE-2023-36256: Cross-Site Request Forgery (CSRF)

The Online Examination System Project 1.0 version is vulnerable to Cross-Site Request Forgery CSRF attacks. An attacker can craft a malicious link that, when clicked by an admin user, will delete a user account from the database without the admin's consent. The email of the user to be deleted is...