Lucene search
+L

16 matches found

NVD
NVD
•added 2026/10/13 5:17 p.m.•12 views

CVE-2026-109607

A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql injection. It is possible to initiate the attack remotely. Th...

7.5CVSS0.00328EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/13 4:15 p.m.•18 views

CVE-2026-109607

A SQL injection vulnerability exists in SourceCodester Online Exam System 1.0 within the Login Endpoint component. Specifically, an unknown function in the file adminpanel/admin/query/loginExe.php fails to properly neutralize inputs for the username/pass arguments. This flaw allows for remote att...

7.5CVSS7AI score0.00328EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/13 4:15 p.m.•11 views

EUVD-2026-98851

A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql injection. It is possible to initiate the attack remotely. Th...

7.5CVSS7AI score0.00328EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/13 4:15 p.m.•36 views

CVE-2026-109607 SourceCodester Online Exam System Login Endpoint loginExe.php sql injection

A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql injection. It is possible to initiate the attack remotely. Th...

7.5CVSS0.00328EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

CVE-2026-109607: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql injection. It is possible to initiate the attack remotely. Th...

7.5CVSS7AI score0.00328EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-111676

Name of the Vulnerable Software and Affected Versions SourceCodester Online Exam System version 1.0 Description An issue exists in the Login Endpoint within the file adminpanel/admin/query/loginExe.php. Remote manipulation of the username and pass arguments allows for SQL injection, a technique...

7.5CVSS7.2AI score0.00328EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/12/14 6:31 p.m.•24 views

EUVD-2025-203305

A vulnerability was detected in campcodes Advanced Online Examination System 1.0. This affects an unknown function of the file /query/loginExe.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is now public...

7.5CVSS7.2AI score0.00387EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2025/12/14 4:32 p.m.•12 views

CVE-2025-14668

A vulnerability was detected in campcodes Advanced Online Examination System 1.0. This affects an unknown function of the file /query/loginExe.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is now publi...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/12/14 4:32 p.m.•49 views

CVE-2025-14668 campcodes Advanced Online Examination System loginExe.php sql injection

A vulnerability was detected in campcodes Advanced Online Examination System 1.0. This affects an unknown function of the file /query/loginExe.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is now publi...

7.5CVSS0.00387EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/14 12:00 a.m.•8 views

CVE-2025-14668: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in campcodes Advanced Online Examination System 1.0. This affects an unknown function of the file /query/loginExe.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is now publi...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2024/03/27 3:15 a.m.•22 views

CVE-2024-2941

A vulnerability, which was classified as critical, has been found in Campcodes Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /adminpanel/admin/query/loginExe.php. The manipulation of the argument pass leads to sql injection. The attack may be...

9.8CVSS6.4AI score0.00689EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/03/27 2:00 a.m.•24 views

CVE-2024-2941 Campcodes Online Examination System loginExe.php sql injection

A vulnerability, which was classified as critical, has been found in Campcodes Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /adminpanel/admin/query/loginExe.php. The manipulation of the argument pass leads to sql injection. The attack may be...

6.5CVSS6.4AI score0.00689EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/03/27 2:00 a.m.•49 views

CVE-2024-2941 Campcodes Online Examination System loginExe.php sql injection

A vulnerability, which was classified as critical, has been found in Campcodes Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /adminpanel/admin/query/loginExe.php. The manipulation of the argument pass leads to sql injection. The attack may be...

6.5CVSS7AI score0.00689EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•10 views

CVE-2024-2941: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Campcodes Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /adminpanel/admin/query/loginExe.php. The manipulation of the argument pass leads to sql injection. The attack may be...

9.8CVSS6.4AI score0.00689EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/03/27 12:00 a.m.•22 views

Online Examination System SQL Injection Vulnerabilities

SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. A SQL injection vulnerability exists in Online Examination System version 1.0, which originates from a SQL injection vulnerability in the pass parameter of the /adminpanel/admin/query/loginExe.php...

9.8CVSS6.6AI score0.00689EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/03/26 12:00 a.m.•9 views

PT-2024-22885

Name of the Vulnerable Software and Affected Versions Campcodes Online Examination System version 1.0 Description A critical issue has been found in the system, affecting some unknown functionality of the file /adminpanel/admin/query/loginExe.php. The manipulation of the pass argument leads to sq...

9.8CVSS6.2AI score0.00689EPSS
SaveExploits1References8
Rows per page
Query Builder