PT-2023-30273

Name of the Vulnerable Software and Affected Versions Yunfan Learning Examination System version 6.5 Description The issue allows a remote attacker to obtain sensitive information via the password parameter in the login function. Recommendations For Yunfan Learning Examination System version 6.5,...

CVE-2023-45111

Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-45111

Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database...

Sql injection

Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-45114

This CVE entry is rejected per the Initial Description.

CVE-2023-45113

PT-2023-29412 documents an unauthenticated SQL injection in Online Examination System v1.0, specifically in the feed.php name parameter where input isn’t validated before using in the database. Impact is typical SQLi risk (data exposure/modification) as described by the vendor. Recommended remedi...

CVE-2023-45112

PT-2023-29411 details an unauthenticated SQL injection in Online Examination System v1.0, via the feed.php resource (parameter: feedback) that feeds unsafely to the database. Consequences could include data disclosure or modification as per site admin guidance. Mitigation steps include input vali...

CVE-2023-45111 Online Examination System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-45111

Online Examination System v1.0 contains unauthenticated SQL injection vulnerabilities in feed.php, caused by improper validation/escaping of the email parameter. This vulnerability (CVE-2023-45111) is reported across multiple sources, with the weakness described as unfiltered input reaching the d...

CVE-2023-45111 Online Examination System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database...

Online Examination System SQL注入漏洞

Online Examination System is an online examination system. Online Examination System v1.0 suffers from a SQL injection vulnerability, which stems from the lack of effective filtering and escaping of user-supplied data in the email parameter of the feed.php page, which can be exploited by an...

Number withdrawn

Project Worlds Online Examination System is an online examination system. This CVE number has been withdrawn...

Number withdrawn

Project Worlds Online Examination System is an online examination system. This CVE number has been withdrawn...

PT-2023-29412 · Unknown · Online Examination System

Name of the Vulnerable Software and Affected Versions: Online Examination System version 1.0 Description: The issue is related to multiple Unauthenticated SQL Injection vulnerabilities. The name parameter of the "feed.php" resource does not validate the characters received, and they are sent...

PT-2023-29413 · Unknown · Online Examination System

Name of the Vulnerable Software and Affected Versions: Online Examination System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the subject parameter of the "feed.php" resource does not validate the characters received, sending th...

CVE-2023-45111: Improper Neutralization of Special Elements used in an SQL Command

Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database...

PT-2023-29410

Name of the Vulnerable Software and Affected Versions Online Examination System version 1.0 Description The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The email parameter of the "feed.php" resource does not validate the characters received and they are sent unfiltered ...

Number withdrawn

Project Worlds Online Examination System is an online examination system. This CVE number has been withdrawn...

CVE-2023-45203

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the login.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL...

CVE-2023-45203

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the login.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL...