531 matches found
CVE-2020-25411: Cross-Site Request Forgery (CSRF)
Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user...
SourceCodester Online Examination System Cross-Site Scripting Vulnerability
SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. in the United States. Worlds Online Examination System 1.0 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to inject arbitrary code via the name field...
Project Worlds Online Examination System 跨站请求伪造漏洞
Projectworlds Online Examination System is an online examination system. projectworlds Online Examination System cross-site request forgery vulnerability, which can be exploited by attackers to delete existing users...
PT-2021-11206
Name of the Vulnerable Software and Affected Versions: Project Worlds Online Examination System version 1.0 Description: The issue concerns a Cross Site Scripting XSS problem. It occurs via the account.php file, which suggests that the vulnerability can be exploited through this specific file...
PT-2021-11138
Name of the Vulnerable Software and Affected Versions: Projectworlds Online Examination System version 1.0 Description: The issue allows a remote attacker to delete existing users due to a CSRF vulnerability. Recommendations: For Projectworlds Online Examination System version 1.0, consider...
CVE-2020-26006: Improper Neutralization of Input During Web Page Generation
Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting XSS via account.php...
CVE-2020-29205
XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field...
CVE-2020-29205
XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field...
CVE-2020-29205
XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field...
CVE-2020-29205
CVE-2020-29205 affects SourceCodester Worlds Online Examination System 1.0. An XSS vulnerability exists in the signup form where an attacker can inject arbitrary code via the name field. Root cause appears to be insufficient input sanitization in the signup logic. Impact is described as cross-sit...
PT-2021-11657
Name of the Vulnerable Software and Affected Versions: Project Worlds Online Examination System version 1.0 Description: The issue allows a remote attacker to inject arbitrary code via the name field in the signup form. This can lead to the execution of malicious code on the victim's browser...
CVE-2020-29205: Improper Neutralization of Input During Web Page Generation
XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field...
Unauthorized Access Vulnerability in Teach's WEB Exam System
After 13 years of accumulation and precipitation of education technology, Fuxin Teach's Beginning Technology Development Co., Ltd. focuses on the development of examination system software, and is one of the few professional examination system developers in China. There is an unauthorized access...
Beijing Yunfan Internet Technology Co., Ltd. training and examination system has logical flaws and loopholes
Beijing Yunfan Internet Technology Co., Ltd. business scope includes: technology development, technology promotion, technology transfer, technology consulting, technical services and so on. Beijing Yunfan Internet Technology Co., Ltd. training and examination system exists logic flaws...
SQL Injection Vulnerability in Training and Exam System of Beijing Yunfan Internet Technology Co.
Beijing Yunfan Internet Technology Co., Ltd. is a technical service provider specializing in the development of training and examination systems and document management systems. Beijing Yunfan Internet Technology Co., Ltd. training and examination system exists SQL injection vulnerability,...
SourceCodester Online Examination System Cross-Site Scripting Vulnerability (CNVD-2020-74075)
SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. in the United States. SourceCodester Online Examination System 1.0 suffers from a cross-site scripting vulnerability that originates in the w parameter of index.php, which can be exploited by an...
SourceCodester Online Examination System Cross-Site Scripting Vulnerability (CNVD-2021-95922)
SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Online Examination System, which originates from the q parameter does not filter user input, which can be exploited to execute JavaScrip...
SourceCodester Online Examination System Cross-Site Scripting Vulnerability (CNVD-2021-95923)
SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Online Examination System 1.0, which stems from a WEB application's lack of proper validation of The vulnerability is caused by the lack...
