42 matches found
CVE-2025-46173
CVE-2025-46173 - Online Exam Mastering System 1.0 における格納型クロスサイトスクリプティング XSS 📌 概要 CVE-2025-46173 は、code-projects の Online Exam Mastering System 1.0 で発見された 格納型クロスサイトスクリプティング XSS 脆弱性です。この脆弱性は feedback.php コンポーネントに存在し、名前フィールド へのユーザー入力が適切にサニタイズされないため、悪意のある攻撃者が任意の JavaScript を注入できるようになります。管理者が管理ダッシュボード...
CVE-2025-28121
💥 CVE-2025-28121 - Online Exam Mastering System 1.0 における反射型XSS 📝 説明 code-projects Online Exam Mastering System 1.0 には、feedback.php ファイルの q パラメータを介した反射型クロスサイトスクリプティング（XSS）の脆弱性があります。 この問題により、リモートの攻撃者が悪意のある JavaScript をアプリケーションに注入できるようになり、その入力は適切なサニタイズやエンコードが行われずにレスポンスに反映されます。悪用に成功すると、Cookie...
EUVD-2024-51172
Malicious code in bioql PyPI...
EUVD-2024-51171
Malicious code in bioql PyPI...
EUVD-2024-51170
Malicious code in bioql PyPI...
EUVD-2025-6501
Malicious code in bioql PyPI...
CVE-2025-46173
code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS via the name field in the feedback form...
CVE-2025-46173
code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS via the name field in the feedback form...
CVE-2025-46173
CVE-2025-46173 is a stored XSS vulnerability in code-projects Online Exam Mastering System 1.0. The issue occurs in the feedback form’s name field and is triggered when an administrator views the feedback in the admin dashboard (dash.php), allowing injected scripts to execute in the admin’s brows...
CVE-2025-46173
code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS via the name field in the feedback form...
CVE-2024-12892
A vulnerability classified as problematic was found in code-projects Online Exam Mastering System 1.0. Affected by this vulnerability is an unknown functionality of the file /sign.php?q=account.php. The manipulation of the argument name/gender/college leads to cross site scripting. The attack can...
CVE-2024-12891
A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Affected is an unknown function of the file /account.php?q=quiz=2. The manipulation of the argument eid leads to sql injection. It is possible to launch the attack remotely. The exploit has be...
CVE-2024-12890
A vulnerability was found in code-projects Online Exam Mastering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /update.php?q=quiz=2. The manipulation of the argument eid leads to sql injection. The attack may be initiated remotely. The exploit h...
CVE-2025-28121
code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...
📄 Online Exam Mastering System 1.0 Cross Site Scripting
Online Exam Mastering System version 1.0 suffers from a cross site scripting vulnerability. Exploit Title: code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting XSS Google Dork: inurl:/exam/feedback.php Date: 2025-04-19 Exploit Author: Pruthu Raut Vendor Homepage:...
code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting (XSS)
Exploit Title: code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting XSS Google Dork: inurl:/exam/feedback.php Date: 2025-04-19 Exploit Author: Pruthu Raut Vendor Homepage: https://code-projects.org/ Software Link:...
CVE-2025-28121
code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...
PT-2025-17438 · Unknown · Code-Projects Online Exam Mastering System
Name of the Vulnerable Software and Affected Versions: code-projects Online Exam Mastering System version 1.0 Description: The issue concerns a Cross Site Scripting XSS vulnerability in the feedback.php file via the q parameter, allowing remote attackers to execute arbitrary code. Recommendations...