CVE-2023-45117

CVE-2023-45117 affects Online Examination System v1.0, where the authenticated user can trigger SQL Injection via the eid parameter in /update.php?q=rmquiz. The root cause is lack of input validation/unfiltered data sent to the database, enabling possible data access or modification. The vulnerab...

CVE-2023-45117 Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'eid' parameter of the /update.php?q=rmquiz resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-45116 Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'demail' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-45116 Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'demail' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-45116

Summary: CVE-2023-45116 concerns Online Examination System v1.0 where the 'demail' parameter of /update.php is vulnerable to authenticated SQL injection due to unfiltered input. Multiple sources describe the vulnerability as enabling unvalidated characters to reach the database, with high impact ...

CVE-2023-45115 Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'ch' parameter of the /update.php?q=addqns resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-45115

The CVE-2023-45115 entry concerns Online Examination System v1.0 with multiple Authenticated SQL Injection flaws. The issue stems from the ch parameter in the endpoint /update.php?q=addqns not validating characters before sending input to the database, enabling injection under authenticated condi...

CVE-2023-45115 Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'ch' parameter of the /update.php?q=addqns resource does not validate the characters received and they are sent unfiltered to the database...

Number withdrawn

Projectworlds Online Examination System is an online examination system from Projectworlds India. This CVE number has been withdrawn...

Number withdrawn

Projectworlds Online Examination System is an online examination system from Projectworlds India. This CVE number has been withdrawn...

Number withdrawn

Projectworlds Online Examination System is an online examination system from Projectworlds India. This CVE number has been withdrawn...

Number withdrawn

Projectworlds Online Examination System is an online examination system from Projectworlds India. This CVE number has been withdrawn...

Projectworlds Online Examination System SQL Injection Vulnerability

Projectworlds Online Examination System is an online examination system from Projectworlds India. A SQL injection vulnerability exists in Projectworlds Online Examination System v1.0, which stems from the "desc" parameter of update.php that does not validate incoming characters and sends them to...

Number withdrawn

Projectworlds Online Examination System is an online examination system from Projectworlds India. This CVE number has been withdrawn...

Projectworlds Online Examination System SQL Injection Vulnerability

Projectworlds Online Examination System is an online examination system from Projectworlds India. A SQL injection vulnerability exists in Projectworlds Online Examination System v1.0, which originates from the "email" parameter of update.php that does not validate incoming characters and sends th...

Projectworlds Online Examination System SQL Injection Vulnerability

Projectworlds Online Examination System is an online examination system from Projectworlds India. Projectworlds Online Examination System v1.0 suffers from a SQL injection vulnerability, which stems from the "eid" parameter of update.php not validating received characters and sending them to the...

PT-2023-29418 · Unknown · Online Examination System

Name of the Vulnerable Software and Affected Versions: Online Examination System version 1.0 Description: The issue concerns multiple Authenticated SQL Injection vulnerabilities. The 'n' parameter of the "/update.php?q=quiz" resource does not validate the characters received, and they are sent...

CVE-2023-45119: Improper Neutralization of Special Elements used in an SQL Command

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'n' parameter of the /update.php?q=quiz resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-45118: Improper Neutralization of Special Elements used in an SQL Command

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'fdid' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database...

PT-2023-29422 · Unknown · Online Examination System

Name of the Vulnerable Software and Affected Versions: Online Examination System version 1.0 Description: The issue concerns multiple Authenticated SQL Injection vulnerabilities. Specifically, the right parameter of the "update.php" resource does not validate the characters received and they are...