CVE-2021-46086

xzs-mysql = t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destro...

CVE-2021-46086

xzs-mysql = t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destro...

CVE-2021-46086

The CVE-2021-46086 entry affects Mindskip xzs-mysql (version >= t3.4.0). The vulnerability arises from insecure permissions in the submission function of the online examination system, enabling an attacker to modify packet parameters and corrupt real data. Documents indicate an unsafe vulnerab...

SourceCodester Online Examination System SQL Injection Vulnerability

SourceCodester Projectworlds Online Examination System is an online examination system from SourceCodester, Inc. v1.0 contains a SQL injection vulnerability that stems from the failure of the eid parameter in the product's account.php page to properly filter special characters in user input data...

PT-2022-12561

Name of the Vulnerable Software and Affected Versions xzs-mysql versions t3.4.0 and later Description The issue concerns an insecure permissions vulnerability in the functional method of submitting examination papers in an online examination system. An attacker can exploit this by modifying...

Mindskip xzs-mysql 权限许可和访问控制问题漏洞

Mindskip xzs-mysql is a java + vue front-end and back-end separation of the examination system from Wuhan, China Mindskip technology Mindskip company. The main advantages are simple and fast development and deployment, friendly interface design and clear code structure. Support web end and wechat...

CVE-2021-46307

An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php...

CVE-2021-46307

An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php...

CVE-2021-46307

An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php...

Sql injection

An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php...

CVE-2021-46307

An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php...

CVE-2021-46307

CVE-2021-46307 affects the Projectworlds Online Examination System 1.0 . The vulnerability is an SQL injection in the parameter eid of the page account.php , caused by insufficient input filtering. The CVSS metrics indicate a CRITICAL risk (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; base scor...

SourceCodester Online Examination System SQL注入漏洞

SourceCodester Projectworlds Online Examination System is an online examination system from SourceCodester, Inc. v1.0 contains a SQL injection vulnerability that stems from the failure of the eid parameter in the product's account.php page to properly filter special characters in user input data...

PT-2022-12630

Name of the Vulnerable Software and Affected Versions Projectworlds Online Examination System version 1.0 Description An SQL Injection issue exists via the eid parameter in the "account.php" file. This allows for potential unauthorized access to database information. Recommendations For...

CVE-2021-46307: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php...

[SECURITY] Fedora 34 Update: wireshark-3.6.1-1.fc34

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

Online Examination System Project 1.0 SQL Injection

Title: Online Examination System Project 1.0 SQL - Injections Author: nu11secur1ty Date: 01.10.2022 Vendor: https://projectworlds.in/free-projects/php-projects/ Software: https://projectworlds.in/free-projects/php-projects/online-examination/ Description: The eid parameter in account.php from...

Online Examination System Project 1.0 SQL Injection Vulnerability

Title: Online Examination System Project 1.0 SQL - Injections Author: nu11secur1ty Vendor: https://projectworlds.in/free-projects/php-projects/ Software: https://projectworlds.in/free-projects/php-projects/online-examination/ Description: The eid parameter in account.php from Online Examination...

The vulnerability of the electronic examination system TCExam arises from the lack of measures taken to protect the structure of the web page. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the electronic examination system TCExam exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information through a specially...

All Vulnerabilities for exams.edu.skipatrol.ca Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| exams.edu.skipatrol.ca ---|--- Open Bug...