CVE-2022-2379

The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in its REST API, allowing unauthenticated users to retrieve information related to the courses, exams, departments as well as student's grades and PII such as email address, physical address, phone number etc...

CVE-2022-2379

The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in its REST API, allowing unauthenticated users to retrieve information related to the courses, exams, departments as well as student's grades and PII such as email address, physical address, phone number etc...

Google Cloud Certifications — Get Prep Courses and Practice Tests at 95% Discount

As cloud computing continues to grow, Google Cloud is quickly becoming one of the most popular solutions. However, relatively few engineers know this platform well. This leaves the door open for aspiring IT professionals who take the official exams. The Google Cloud Certifications Practice Tests ...

Google Cloud Certifications — Get Prep Courses and Practice Tests at 95% Discount

As cloud computing continues to grow, Google Cloud is quickly becoming one of the most popular solutions. However, relatively few engineers know this platform well. This leaves the door open for aspiring IT professionals who take the official exams. The Google Cloud Certifications Practice Tests ...

Testa Online Test Management System 3.4.7 - 'q' SQL Injection

Exploit Title: Testa Online Test Management System 3.4.7 - 'q' SQL Injection Date: 2020-07-21 Google Dork: N/A Exploit Author: Ultra Security Team Team Members: Ashkan Moghaddas , AmirMohammad Safari , Behzad Khalifeh , Milad Ranjbar Vendor Homepage: https://testa.cc Version: v3.4.7 Tested on:...

Testa Online Test Management System 3.4.7 SQL Injection

Exploit Title: Testa Online Test Management System 3.4.7 - 'q' SQL Injection Date: 2020-07-21 Google Dork: N/A Exploit Author: Ultra Security Team Team Members: Ashkan Moghaddas , AmirMohammad Safari , Behzad Khalifeh , Milad Ranjbar Vendor Homepage: https://testa.cc Version: v3.4.7 Tested on:...

SQL injection vulnerability in the wa***.aspx page of Qixing Exam System Exam Candidate Side at Shanghai Tsuenlu Software Development Studio.

Exam System Exam is a compact exam system for internal corporate use for employee exams. Shanghai Tsuen Road Software Development Studio Qixing Exam System Exam candidate side wa.aspx page there is a SQL injection vulnerability, an attacker can use this vulnerability to obtain sensitive informati...

Prepare for Cisco, CompTIA, and More IT Certifications with this Bundle

Exams are pretty important in professional IT. You can have all the practical knowledge in the world, but technical recruiters want to see certificates. If you want to improve your resume, the Complete 2020 IT Certification Exam Prep Mega Bundle will help you ace nine of the most important exams...

Algeria Shut Down the Internet to Prevent Students from Cheating on Exams

Algeria shut the Internet down nationwide to prevent high-school students from cheating on their exams. The solution in New South Wales, Australia was to ban smartphones. EDITED TO ADD 6/22: Slashdot thread...

cambridgeexams-avo.com XSS vulnerability

Open Bug Bounty ID: OBB-556136 Description| Value ---|--- Affected Website:| cambridgeexams-avo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PHP Scripts Mall Online Exam Test Application Script SQL Injection Vulnerability

PHP Scripts Mall Online Exam Test Application Script is a PHP based online exam management system from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Online Exam Test Application Script version 1.6. A remote attacker can exploit this vulnerability by sending the...

public.psiexams.com XSS vulnerability

Open Bug Bounty ID: OBB-447856 Description| Value ---|--- Affected Website:| public.psiexams.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

TCExam 12.2.5 Information Disclosure

--------------------------------------------------------- Correct answer Information Disclosure in TCExam " element for each multiple-choice answer has an "id" attribute with a numeric value indicating in which position the answer was created. Therefore the lowest "id" will always be the right...

PT-2015-3446 · WordPress · Watu Quiz Plugin

Name of the Vulnerable Software and Affected Versions: Watu Quiz Plugin versions up to 2.6.7 Description: A critical issue affects the watu exams function of the controllers/exam.php file in the Exam Handler component. The manipulation of the quiz argument leads to SQL injection. The attack can b...

carecredit.com XSS vulnerability

Vulnerable URL: http://www.carecredit.com/doctor-locator/results/Vision/Eye-Exams-Eye-Glasses/LA-QUINTA-CA/?Name="=25=61 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

Threat Outbreak Alert RuleID11009: Email Messages Distributing Malicious Software on August 7, 2014

Medium Alert ID: 35220 First Published: 2014 August 8 13:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11009 may contain the following files: Name | Si...

TCExam <= 11.2.011 - Multiple SQL Injection Vulnerabilities

No description provided by source. TCExam =11.2.011 Multiple SQL Injection Vulnerabilities Vendor: Tecnik.com s.r.l. Product web page: http://www.tcexam.org Affected version: 11.2.009, 11.2.010 and 11.2.011 Summary: TCExam is a FLOSS system for electronic exams also know as CBA - Computer-Based...

BPStudent 1.0 - Blind SQL Injection

No description provided by source. x========================================================================================================================================x | AntiSecuritydotorg |...

"SecurityTube Wi-Fi Security Expert" (SWSE) online certification Launched

"SecurityTube Wi-Fi Security Expert" SWSE online certification Launched SecurityTube released their first fully online certification today - "SecurityTube Wi-Fi Security Expert " SWSE . The most interesting thing and key difference from other certifications, is that they are giving out the entire...

TCExam 11.2.011 Cross Site Scripting

TCExam =11.2.011 Multiple Cross-Site Scripting Vulnerabilities Vendor: Tecnik.com s.r.l. Product web page: http://www.tcexam.org Affected version: 11.2.009, 11.2.010 and 11.2.011 Summary: TCExam is a FLOSS system for electronic exams also know as CBA - Computer-Based Assessment, CBT -...