CVE-2020-25411

Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user...

CVE-2020-26006

Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting XSS via account.php...

Cross site scripting

Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting XSS via account.php...

CVE-2020-26006

Project Worlds Online Examination System 1.0 is vulnerable to Cross-Site Scripting (XSS) via account.php. Multiple sources (NVD CVE-2020-26006; CNVD/CNNVD entries) confirm an XSS vulnerability in this version, enabling injection of malicious JavaScript to execute in a user’s browser and potential...

CVE-2020-26006

Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting XSS via account.php...

CVE-2020-25411

Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user...

CVE-2020-25411

CVE-2020-25411 : Projectworlds Online Examination System 1.0 is vulnerable to Cross-Site Request Forgery (CSRF) , allowing a remote attacker to delete an existing user. Connected documents corroborate the CSRF root cause and the impact as user deletion. No concrete technical details (endpoints, p...

SourceCodester Online Examination System Cross-Site Scripting Vulnerability

SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. in the United States. Worlds Online Examination System 1.0 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to inject arbitrary code via the name field...

Project Worlds Online Examination System 跨站请求伪造漏洞

Projectworlds Online Examination System is an online examination system. projectworlds Online Examination System cross-site request forgery vulnerability, which can be exploited by attackers to delete existing users...

CVE-2020-29205

XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field...

CVE-2020-29205

XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field...

CVE-2020-29205

CVE-2020-29205 affects SourceCodester Worlds Online Examination System 1.0. An XSS vulnerability exists in the signup form where an attacker can inject arbitrary code via the name field. Root cause appears to be insufficient input sanitization in the signup logic. Impact is described as cross-sit...

Unauthorized Access Vulnerability in Teach's WEB Exam System

After 13 years of accumulation and precipitation of education technology, Fuxin Teach's Beginning Technology Development Co., Ltd. focuses on the development of examination system software, and is one of the few professional examination system developers in China. There is an unauthorized access...

CISA Issues Emergency Directive and Alert on Microsoft Exchange Vulnerabilities

CISA has issued Emergency Directive ED 21-02 and Alert AA21-062A addressing critical vulnerabilities in Microsoft Exchange products. Successful exploitation of these vulnerabilities allows an attacker to access on-premises Exchange servers, enabling them to gain persistent system access and contr...

[SECURITY] Fedora 32 Update: wireshark-3.4.3-1.fc32

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

[SECURITY] Fedora 33 Update: wireshark-3.4.3-1.fc33

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

Beijing Yunfan Internet Technology Co., Ltd. training and examination system has logical flaws and loopholes

Beijing Yunfan Internet Technology Co., Ltd. business scope includes: technology development, technology promotion, technology transfer, technology consulting, technical services and so on. Beijing Yunfan Internet Technology Co., Ltd. training and examination system exists logic flaws...

SQL Injection Vulnerability in Training and Exam System of Beijing Yunfan Internet Technology Co.

Beijing Yunfan Internet Technology Co., Ltd. is a technical service provider specializing in the development of training and examination systems and document management systems. Beijing Yunfan Internet Technology Co., Ltd. training and examination system exists SQL injection vulnerability,...

[SECURITY] Fedora 32 Update: wireshark-3.4.2-1.fc32

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

SourceCodester Online Examination System Cross-Site Scripting Vulnerability (CNVD-2020-74075)

SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. in the United States. SourceCodester Online Examination System 1.0 suffers from a cross-site scripting vulnerability that originates in the w parameter of index.php, which can be exploited by an...