CVE-2022-42066

Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php...

Cross site scripting

Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php...

CVE-2022-42066

Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php...

CVE-2022-42066

Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php...

PT-2022-26229 · Unknown · Online Examination System

Name of the Vulnerable Software and Affected Versions: Online Examination System version 1.0 Description: The issue is related to a cross-site scripting vulnerability. It can be exploited via the index.php file. Recommendations: For Online Examination System version 1.0, consider disabling access...

Online Examination System 跨站脚本漏洞

Sourcecodester SourceCodester Online Examination System is an online examination system from Sourcecodester, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Online Examination System, which stems from its index.php component that allows an attacker to implement reflective...

CVE-2022-42066

CVE-2022-42066 affects Online Examination System version 1.0, with a cross-site scripting vulnerability exploitable via index.php. The issue is a client-side input handling flaw that can expose confidentiality and integrity risks (per CVSS data: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Exploitation ...

Online Examination System 1.0 SQL Injection

Exploit Title: Online Examination System - SQL Injection Google Dork: N/A Date: 2022-9-28 Exploit Author: yousef alraddadi - https://twitter.com/y0usef11 Vendor Homepage: https://projectworlds.in/free-projects/php-projects/online-examination/ Software Link:...

Online Examination System 1.0 Cross Site Scripting Vulnerability

Exploit Title: Online Examination System - Cross site scripting Reflected Exploit Author: yousef alraddadi - https://twitter.com/y0usef11 Vendor Homepage: https://projectworlds.in/free-projects/php-projects/online-examination/ Software Link:...

Online Examination System 1.0 SQL Injection Vulnerability

Exploit Title: Online Examination System - SQL Injection Exploit Author: yousef alraddadi - https://twitter.com/y0usef11 Vendor Homepage: https://projectworlds.in/free-projects/php-projects/online-examination/ Software Link:...

CVE-2022-0987

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists...

Code injection

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists...

CVE-2022-0987

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists...

Okta admits 366 customers may have been impacted by LAPSUS$ breach

Through its usual means of communication, its Telegram channel, the LAPSUS$ group has posted screenshots of what appears to be superuser access to the Okta management console. As such, the group claims to have acquired "superuser/admin" access to Okta.com and gained access to Oktas customer data,...

The world’s most coveted spyware, Pegasus: Lock and Code S03E04

Two years ago, the FBI reportedly purchased a copy of the worlds most coveted spyware, a tool that can remotely and silently crack into Androids and iPhones without leaving a trace, spilling device contents onto a console possibly thousands of miles away, with little more effort than entering a...

CVE-2021-46086

xzs-mysql = t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destro...

CVE-2021-46086

xzs-mysql = t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destro...

Code injection

xzs-mysql = t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destro...

CVE-2021-46086

xzs-mysql = t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destro...

CVE-2021-46086

The CVE-2021-46086 entry affects Mindskip xzs-mysql (version >= t3.4.0). The vulnerability arises from insecure permissions in the submission function of the online examination system, enabling an attacker to modify packet parameters and corrupt real data. Documents indicate an unsafe vulnerab...