775 matches found
CVE-2020-26006: Improper Neutralization of Input During Web Page Generation
Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting XSS via account.php...
CVE-2020-29205
XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field...
CVE-2020-29205
XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field...
CVE-2020-29205
XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field...
CVE-2020-29205
CVE-2020-29205 affects SourceCodester Worlds Online Examination System 1.0. An XSS vulnerability exists in the signup form where an attacker can inject arbitrary code via the name field. Root cause appears to be insufficient input sanitization in the signup logic. Impact is described as cross-sit...
PT-2021-11657
Name of the Vulnerable Software and Affected Versions: Project Worlds Online Examination System version 1.0 Description: The issue allows a remote attacker to inject arbitrary code via the name field in the signup form. This can lead to the execution of malicious code on the victim's browser...
CVE-2020-29205: Improper Neutralization of Input During Web Page Generation
XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field...
Unauthorized Access Vulnerability in Teach's WEB Exam System
After 13 years of accumulation and precipitation of education technology, Fuxin Teach's Beginning Technology Development Co., Ltd. focuses on the development of examination system software, and is one of the few professional examination system developers in China. There is an unauthorized access...
CISA Issues Emergency Directive and Alert on Microsoft Exchange Vulnerabilities
CISA has issued Emergency Directive ED 21-02 and Alert AA21-062A addressing critical vulnerabilities in Microsoft Exchange products. Successful exploitation of these vulnerabilities allows an attacker to access on-premises Exchange servers, enabling them to gain persistent system access and contr...
[SECURITY] Fedora 32 Update: wireshark-3.4.3-1.fc32
Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...
[SECURITY] Fedora 33 Update: wireshark-3.4.3-1.fc33
Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...
Beijing Yunfan Internet Technology Co., Ltd. training and examination system has logical flaws and loopholes
Beijing Yunfan Internet Technology Co., Ltd. business scope includes: technology development, technology promotion, technology transfer, technology consulting, technical services and so on. Beijing Yunfan Internet Technology Co., Ltd. training and examination system exists logic flaws...
SQL Injection Vulnerability in Training and Exam System of Beijing Yunfan Internet Technology Co.
Beijing Yunfan Internet Technology Co., Ltd. is a technical service provider specializing in the development of training and examination systems and document management systems. Beijing Yunfan Internet Technology Co., Ltd. training and examination system exists SQL injection vulnerability,...
[SECURITY] Fedora 32 Update: wireshark-3.4.2-1.fc32
Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...
SourceCodester Online Examination System Cross-Site Scripting Vulnerability (CNVD-2020-74075)
SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. in the United States. SourceCodester Online Examination System 1.0 suffers from a cross-site scripting vulnerability that originates in the w parameter of index.php, which can be exploited by an...
Fedora: Security Advisory for wireshark (FEDORA-2020-d4344dd12f)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SourceCodester Online Examination System Cross-Site Scripting Vulnerability (CNVD-2021-95922)
SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Online Examination System, which originates from the q parameter does not filter user input, which can be exploited to execute JavaScrip...
SourceCodester Online Examination System Cross-Site Scripting Vulnerability (CNVD-2021-95923)
SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Online Examination System 1.0, which stems from a WEB application's lack of proper validation of The vulnerability is caused by the lack...