644 matches found
Projectworlds Online Examination System SQL Injection Vulnerability
Projectworlds Online Examination System is an online examination system from Projectworlds India. A SQL injection vulnerability exists in Projectworlds Online Examination System v1.0, which stems from the "desc" parameter of update.php that does not validate incoming characters and sends them to...
CVE-2023-46963
An issue in Beijing Yunfan Internet Technology Co., Ltd, Yunfan Learning Examination System v.6.5 allows a remote attacker to obtain sensitive information via the password parameter in the login function...
CVE-2023-46963
An issue in Beijing Yunfan Internet Technology Co., Ltd, Yunfan Learning Examination System v.6.5 allows a remote attacker to obtain sensitive information via the password parameter in the login function...
CVE-2023-46963
An issue in Beijing Yunfan Internet Technology Co., Ltd, Yunfan Learning Examination System v.6.5 allows a remote attacker to obtain sensitive information via the password parameter in the login function...
Yunfan Learning Examination System Security Vulnerability
Yunfan Learning Examination System is an examination application from the Chinese company Yunfan. A security vulnerability exists in Yunfan Learning Examination System version v.6.5, which originated from a vulnerability that allows remote attackers to obtain sensitive information via the passwor...
CVE-2023-46963
CVE-2023-46963 affects Yunfan Learning Examination System v6.5 from Beijing Yunfan Internet Technology Co.; reported as an information disclosure via the login password parameter. The vulnerability is described as allowing a remote attacker to obtain sensitive data during login. Public details in...
CVE-2023-45111
Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-45111
Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database...
Sql injection
Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-45114
This CVE entry is rejected per the Initial Description.
CVE-2023-45113
PT-2023-29412 documents an unauthenticated SQL injection in Online Examination System v1.0, specifically in the feed.php name parameter where input isn’t validated before using in the database. Impact is typical SQLi risk (data exposure/modification) as described by the vendor. Recommended remedi...
CVE-2023-45112
PT-2023-29411 details an unauthenticated SQL injection in Online Examination System v1.0, via the feed.php resource (parameter: feedback) that feeds unsafely to the database. Consequences could include data disclosure or modification as per site admin guidance. Mitigation steps include input vali...
CVE-2023-45111 Online Examination System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-45111
Online Examination System v1.0 contains unauthenticated SQL injection vulnerabilities in feed.php, caused by improper validation/escaping of the email parameter. This vulnerability (CVE-2023-45111) is reported across multiple sources, with the weakness described as unfiltered input reaching the d...
CVE-2023-45111 Online Examination System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database...
Number withdrawn
Project Worlds Online Examination System is an online examination system. This CVE number has been withdrawn...
Number withdrawn
Project Worlds Online Examination System is an online examination system. This CVE number has been withdrawn...
Online Examination System SQL注入漏洞
Online Examination System is an online examination system. Online Examination System v1.0 suffers from a SQL injection vulnerability, which stems from the lack of effective filtering and escaping of user-supplied data in the email parameter of the feed.php page, which can be exploited by an...
PT-2023-29412 · Unknown · Online Examination System
Name of the Vulnerable Software and Affected Versions: Online Examination System version 1.0 Description: The issue is related to multiple Unauthenticated SQL Injection vulnerabilities. The name parameter of the "feed.php" resource does not validate the characters received, and they are sent...