CVE-2020-29258

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the w parameter to index.php...

CVE-2020-29258

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the w parameter to index.php...

CVE-2020-29259

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php...

CVE-2020-29257

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the q parameter to feedback.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the q parameter to feedback.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the w parameter to index.php...

CVE-2020-29259

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php...

CVE-2020-29259

CVE-2020-29259 is a cross-site scripting (XSS) vulnerability in Online Examination System 1.0, exploitable via the subject or feedback parameter to feedback.php. The root cause is insufficient input validation/ sanitization of user-supplied data, enabling attacker-controlled script execution in t...

CVE-2020-29258

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the w parameter to index.php...

CVE-2020-29258

CVE-2020-29258 is an XSS vulnerability in Online Examination System 1.0, exploitable via the w parameter in index.php. The affected component is the web application’s index.php handling the w query parameter, enabling attacker-supplied script to be reflected to the user. Documented impact is clie...

CVE-2020-29257

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the q parameter to feedback.php...

CVE-2020-29257

CVE-2020-29257: Cross-site scripting in Online Examination System 1.0 (SourceCodester Online Examination System) via the q parameter to feedback.php. Root cause: user input in q is not properly filtered, enabling injection of JavaScript that can execute in the victim’s browser. Documented impact:...

PT-2020-17128

Name of the Vulnerable Software and Affected Versions Online Examination System version 1.0 Description The issue is a cross-site scripting XSS vulnerability. It can be exploited via the subject or feedback parameter to the "feedback.php" endpoint. This allows for potential malicious script...

PT-2020-17126

Name of the Vulnerable Software and Affected Versions Online Examination System version 1.0 Description The issue is related to a cross-site scripting XSS vulnerability. It can be exploited via the q parameter to the "feedback.php" endpoint. Recommendations For Online Examination System version...

SourceCodester Online Examination System 跨站脚本漏洞

SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Online Examination System, which originates from the q parameter does not filter user input, which can be exploited to execute JavaScrip...

SourceCodester Online Examination System 跨站脚本漏洞

SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. in the United States. SourceCodester Online Examination System 1.0 suffers from a cross-site scripting vulnerability that originates in the w parameter of index.php, which can be exploited by an...

PT-2020-17127

Name of the Vulnerable Software and Affected Versions Online Examination System version 1.0 Description The issue is a cross-site scripting XSS vulnerability. It can be exploited via the w parameter to the "index.php" endpoint. This allows for potential malicious script injection and execution...

CVE-2020-29258: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the w parameter to index.php...

CVE-2020-29257: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the q parameter to feedback.php...