CVE-2025-46173

CVE-2025-46173 - Cross-Site Scripting XSS Almacenado en Online Exam Mastering System 1.0 📌 Resumen CVE-2025-46173 es una vulnerabilidad de Cross-Site Scripting XSS Almacenado descubierta en Online Exam Mastering System 1.0 de code-projects. La vulnerabilidad existe en el componente feedback.php...

CVE-2025-28121

💥 CVE-2025-28121 - XSS Reflejado en Online Exam Mastering System 1.0 📝 Descripción code-projects Online Exam Mastering System 1.0 es vulnerable a Cross-Site Scripting XSS Reflejado en el archivo feedback.php a través del parámetro q. Este problema permite a atacantes remotos inyectar JavaScript...

CVE-2026-86238

A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site scripting. The attack may be launched...

CVE-2026-86238 projectworlds Online Examination System Feedback Form feedback.php cross site scripting

A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site scripting. The attack may be launched...

CVE-2026-86238 projectworlds Online Examination System Feedback Form feedback.php cross site scripting

A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site scripting. The attack may be launched...

CVE-2026-86238

CVE-2026-86238 affects projectworlds Online Examination System 1.0 , specifically the Feedback Form component in the file feedback.php . An attacker can remotely manipulate the Name/Subject argument to trigger a cross-site scripting (XSS) flaw. The CVSS 3.1 score is 4.3 (MEDIUM) , with low attack...

EUVD-2026-72186

A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site scripting. The attack may be launched...

CVE-2026-86238: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site scripting. The attack may be launched...

PT-2026-86584

A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site scripting. The attack may be launched...

CVE-2026-13567

A security flaw has been discovered in code-projects Online Music Site 1.0. This affects an unknown part of the file /Frontend/Feedback.php of the component POST Request Handler. The manipulation of the argument fname/femail/faddress/fmessage results in cross site scripting. The attack may be...

CVE-2026-13567

The CVE-2026-13567 entry affects code-projects Online Music Site 1.0 in the POST Request Handler’s /Frontend/Feedback.php. An attacker can manipulate parameters fname, femail, faddress, or fmessage to trigger cross-site scripting. The issue is remote-present with a publicly released exploit (Proo...

CVE-2026-10606

A vulnerability was determined in DedeCMS 5.7.88. The affected element is the function TrimMsg of the file /plus/feedback.php of the component Feedback Handler. Executing a manipulation of the argument msg can lead to sql injection. The attack can be launched remotely. The exploit has been public...

CVE-2026-0570: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Music Site 1.0. This impacts an unknown function of the file /Frontend/Feedback.php. Performing a manipulation of the argument fname results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used...

Code-Projects Online Music Site SQL注入漏洞

Code-Projects Online Music Site is an open source online music site by Code-Projects. A SQL injection vulnerability exists in Code-Projects Online Music Site version 1.0, which stems from an incorrect manipulation of the parameter fname in the file /Frontend/Feedback.php, which could lead to a SQ...

CVE-2024-46336: Improper Neutralization of Input During Web Page Generation

kashipara School Management System 1.0 is vulnerable to Cross Site Scripting XSS via /clientuser/feedback.php...

EUVD-2009-3939

Malware in sbrugna...

EUVD-2020-21632

Malware in sbrugna...

EUVD-2025-12375

Malicious code in bioql PyPI...

CVE-2025-9473

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly an...

CVE-2025-9473

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly an...