Lucene search
+L

775 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/24 12:00 a.m.•11 views

CVE-2020-26006: Improper Neutralization of Input During Web Page Generation

Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting XSS via account.php...

6.1CVSS5.7AI score0.00685EPSS
SaveExploits0References2
NVD
NVD
•added 2021/05/17 7:15 p.m.•30 views

CVE-2020-29205

XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field...

6.1CVSS0.01533EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/05/17 7:00 p.m.•35 views

CVE-2020-29205

XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field...

6.3AI score0.01533EPSS
SaveExploits1References3
Mend
Mend
•added 2021/05/17 7:00 p.m.•3 views

CVE-2020-29205

XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field...

6.1CVSS0.01533EPSS
SaveExploits1References3
CVE
CVE
•added 2021/05/17 7:00 p.m.•59 views

CVE-2020-29205

CVE-2020-29205 affects SourceCodester Worlds Online Examination System 1.0. An XSS vulnerability exists in the signup form where an attacker can inject arbitrary code via the name field. Root cause appears to be insufficient input sanitization in the signup logic. Impact is described as cross-sit...

6.1CVSS6.2AI score0.01533EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2021/05/17 12:00 a.m.•3 views

PT-2021-11657

Name of the Vulnerable Software and Affected Versions: Project Worlds Online Examination System version 1.0 Description: The issue allows a remote attacker to inject arbitrary code via the name field in the signup form. This can lead to the execution of malicious code on the victim's browser...

6.1CVSS0.01533EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/17 12:00 a.m.•9 views

CVE-2020-29205: Improper Neutralization of Input During Web Page Generation

XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field...

6.1CVSS6.1AI score0.01533EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/05/10 12:00 a.m.•8 views

Unauthorized Access Vulnerability in Teach's WEB Exam System

After 13 years of accumulation and precipitation of education technology, Fuxin Teach's Beginning Technology Development Co., Ltd. focuses on the development of examination system software, and is one of the few professional examination system developers in China. There is an unauthorized access...

6.9AI score
SaveExploits0
CISA
CISA
•added 2021/03/03 12:00 a.m.•22 views

CISA Issues Emergency Directive and Alert on Microsoft Exchange Vulnerabilities

CISA has issued Emergency Directive ED 21-02 and Alert AA21-062A addressing critical vulnerabilities in Microsoft Exchange products. Successful exploitation of these vulnerabilities allows an attacker to access on-premises Exchange servers, enabling them to gain persistent system access and contr...

7.3AI score
SaveExploits0References3
Fedora
Fedora
•added 2021/02/24 8:47 p.m.•60 views

[SECURITY] Fedora 32 Update: wireshark-3.4.3-1.fc32

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

7.5CVSS5.9AI score0.02747EPSS
SaveExploits2
Fedora
Fedora
•added 2021/02/24 8:43 p.m.•59 views

[SECURITY] Fedora 33 Update: wireshark-3.4.3-1.fc33

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

7.5CVSS5.9AI score0.02747EPSS
SaveExploits2
CNVD
CNVD
•added 2021/02/10 12:00 a.m.•11 views

Beijing Yunfan Internet Technology Co., Ltd. training and examination system has logical flaws and loopholes

Beijing Yunfan Internet Technology Co., Ltd. business scope includes: technology development, technology promotion, technology transfer, technology consulting, technical services and so on. Beijing Yunfan Internet Technology Co., Ltd. training and examination system exists logic flaws...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2021/02/08 12:00 a.m.•9 views

SQL Injection Vulnerability in Training and Exam System of Beijing Yunfan Internet Technology Co.

Beijing Yunfan Internet Technology Co., Ltd. is a technical service provider specializing in the development of training and examination systems and document management systems. Beijing Yunfan Internet Technology Co., Ltd. training and examination system exists SQL injection vulnerability,...

7.8AI score
SaveExploits0
Fedora
Fedora
•added 2021/02/07 1:39 a.m.•114 views

[SECURITY] Fedora 32 Update: wireshark-3.4.2-1.fc32

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

5.3CVSS5.2AI score0.03001EPSS
SaveExploits4
CNVD
CNVD
•added 2020/12/15 12:00 a.m.•10 views

SourceCodester Online Examination System Cross-Site Scripting Vulnerability (CNVD-2020-74075)

SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. in the United States. SourceCodester Online Examination System 1.0 suffers from a cross-site scripting vulnerability that originates in the w parameter of index.php, which can be exploited by an...

6.1CVSS6.4AI score0.00686EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2020/12/14 12:00 a.m.•40 views

Fedora: Security Advisory for wireshark (FEDORA-2020-d4344dd12f)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8AI score
SaveExploits0References2
CNVD
CNVD
•added 2020/12/11 12:00 a.m.•29 views

SourceCodester Online Examination System Cross-Site Scripting Vulnerability (CNVD-2021-95922)

SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Online Examination System, which originates from the q parameter does not filter user input, which can be exploited to execute JavaScrip...

6.1CVSS2.4AI score0.007EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/12/11 12:00 a.m.•63 views

SourceCodester Online Examination System Cross-Site Scripting Vulnerability (CNVD-2021-95923)

SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Online Examination System 1.0, which stems from a WEB application's lack of proper validation of The vulnerability is caused by the lack...

5.4CVSS2.6AI score0.00673EPSS
SaveExploits1References1
OSV
OSV
•added 2020/12/09 11:15 p.m.•13 views

CVE-2020-29259

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php...

5.4CVSS5.8AI score0.00673EPSS
SaveExploits1References1
OSV
OSV
•added 2020/12/09 11:15 p.m.•14 views

CVE-2020-29258

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the w parameter to index.php...

6.1CVSS6.4AI score0.00686EPSS
SaveExploits1References1
Rows per page
Query Builder