CVE-2021-32475

CVE-2021-32475 affects Moodle versions 3.10.0–3.10.3, 3.9.0–3.9.6, 3.8.0–3.8.8, and 3.5–3.5.17 (and older unsupported) where IDs shown in the quiz grading report could be stored XSS vectors due to insufficient sanitization. The issue is a stored XSS in the quiz grading report ID display. The conn...

Student Quarterly Grading System Cross-Site Scripting Vulnerability (CNVD-2022-67487)

Student Quarterly Grading System is a quarterly grading system for students by Carlo Montero, a personal developer. version 1.0 of Student Quarterly Grading System is vulnerable to a cross-site scripting vulnerability, which stems from allowing the fullname and username parameters to to execute...

CVE-2021-41658

Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...

CVE-2021-41658

Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...

Cross site scripting

Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...

CVE-2021-41658

CVE-2021-41658 affects the Sourcecodester Student Quarterly Grading System (by oretnom23). The vulnerability is a Cross Site Scripting (XSS) issue exploitable via the fullname and username parameters on the users page, allowing an attacker to execute arbitrary code. The connected records corrobor...

CVE-2021-41658

Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...

Student Quarterly Grading System 跨站脚本漏洞

Student Quarterly Grading System is a quarterly grading system for students by Carlo Montero, a personal developer. version 1.0 of Student Quarterly Grading System is vulnerable to a cross-site scripting vulnerability, which stems from allowing the fullname and username parameters to to execute...

Student Quarterly Grading System 1.0 - 'grade' Stored Cross-Site Scripting (XSS)

Exploit Title: Student Quarterly Grading System 1.0 - 'grade' Stored Cross-Site Scripting XSS Date: 11.10.2021 Exploit Author: Hüseyin Serkan Balkanli Vendor Homepage: https://www.sourcecodester.com/php/14953/student-quarterly-grading-system-using-php-and-sqlite-free-source-code.html Software Lin...

Student Quarterly Grading System 1.0 - SQLi Authentication Bypass

Exploit Title: Student Quarterly Grading System 1.0 - SQLi Authentication Bypass Date: 04.10.2021 Exploit Author: Blackhan Vendor Homepage: https://www.sourcecodester.com/php/14953/student-quarterly-grading-system-using-php-and-sqlite-free-source-code.html Software Link:...

PT-2021-3115 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions 3.5 to 3.5.17 Moodle versions 3.8 to 3.8.8 Moodle versions 3.9 to 3.9.6 Moodle versions 3.10 to 3.10.3 Description: The issue is related to the quiz grading report in Moodle, where ID numbers required additional sanitizing to...

Online Grading System 1.0 SQL Injection

Exploit Title: Online Grading System 1.0 - 'uname' SQL Injection Date: 2021-01-28 Exploit Author: Ruchi Tiwari Vendor Homepage: https://www.sourcecodester.com/php/13711/online-grading-system-using-phpmysqli.html Software Link:...

Online Grading System 1.0 - 'uname' SQL Injection

Exploit Title: Online Grading System 1.0 - 'uname' SQL Injection Date: 2021-01-28 Exploit Author: Ruchi Tiwari Vendor Homepage: https://www.sourcecodester.com/php/13711/online-grading-system-using-phpmysqli.html Software Link:...

Hacking AI-Graded Tests

The company Edgenuity sells AI systems for grading tests. Turns out that they just search for keywords without doing any actual semantic analysis...

Hacking AI-Graded Tests

The company Edgenuity sells AI systems for grading tests. Turns out that they just search for keywords without doing any actual semantic analysis...

Hacking AI-Graded Tests

The company Edgenuity sells AI systems for grading tests. Turns out that they just search for keywords without doing any actual semantic analysis...

CVE-2020-8203

Prototype pollution attack when using .zipObjectDeep in lodash before 4.17.20...

Submitty 20.04.01 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Submitty 20.04.01 - Persistent Cross-Site Scripting Exploit Author: humblelad Vendor Homepage: http://submitty.org/ Software Link: https://github.com/Submitty/Submitty/releases Version: 20.04.01 Tested on: Mac Os Catalina CVE :...

Sourcecodester Online Grading System SQL Injection Vulnerability

Sourcecodester Online Grading System is a student information management system. The system provides functions such as student information management and online grading. A SQL injection vulnerability exists in the Sourcecodester Online Grading System. An attacker can exploit this vulnerability to...

Sourcecodester Online Grading System Cross-Site Request Forgery Vulnerability

Sourcecodester Online Grading System is a student information management system. The system provides functions such as student information management and online grading. A cross-site request forgery vulnerability exists in the Sourcecodester Online Grading System. An attacker could use this...