CVE-2025-28121

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...

CVE-2025-28121: Improper Neutralization of Input During Web Page Generation

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...

CVE-2025-28121

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...

CVE-2025-25914

SQL injection vulnerability in Online Exam Mastering System v.1.0 allows a remote attacker to execute arbitrary code via the fid parameter...

CVE-2025-25914

SQL injection vulnerability in Online Exam Mastering System v.1.0 allows a remote attacker to execute arbitrary code via the fid parameter...

CVE-2025-25914

SQL injection vulnerability in Online Exam Mastering System v.1.0 allows a remote attacker to execute arbitrary code via the fid parameter...

PT-2025-11552 · Unknown · Online Exam Mastering System

Name of the Vulnerable Software and Affected Versions: Online Exam Mastering System version 1.0 Description: A SQL injection vulnerability in the Online Exam Mastering System allows a remote attacker to execute arbitrary code via the fid parameter. This issue enables attackers to potentially acce...

CVE-2025-25914

SQL injection vulnerability in Online Exam Mastering System v.1.0 allows a remote attacker to execute arbitrary code via the fid parameter...

CVE-2025-25914

SQL injection vulnerability in Online Exam Mastering System v.1.0 allows a remote attacker to execute arbitrary code via the fid parameter...

CVE-2025-25914: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Online Exam Mastering System v.1.0 allows a remote attacker to execute arbitrary code via the fid parameter...

CVE-2025-25914

The Online Exam Mastering System v.1.0 contains a SQL injection vulnerability caused by the incorrect manipulation of the fid parameter. This flaw allows a remote attacker to execute arbitrary code , potentially leading to the access and manipulation of sensitive data. Because no patched version ...

CVE-2024-12892

A vulnerability classified as problematic was found in code-projects Online Exam Mastering System 1.0. Affected by this vulnerability is an unknown functionality of the file /sign.php?q=account.php. The manipulation of the argument name/gender/college leads to cross site scripting. The attack can...

CVE-2024-12892 code-projects Online Exam Mastering System sign.php cross site scripting

A vulnerability classified as problematic was found in code-projects Online Exam Mastering System 1.0. Affected by this vulnerability is an unknown functionality of the file /sign.php?q=account.php. The manipulation of the argument name/gender/college leads to cross site scripting. The attack can...

CVE-2024-12892 code-projects Online Exam Mastering System sign.php cross site scripting

A vulnerability classified as problematic was found in code-projects Online Exam Mastering System 1.0. Affected by this vulnerability is an unknown functionality of the file /sign.php?q=account.php. The manipulation of the argument name/gender/college leads to cross site scripting. The attack can...

CVE-2024-12892

CVE-2024-12892 affects code-projects Online Exam Mastering System 1.0. The vulnerability is in the file /sign.php?q=account.php, where manipulating the arguments name, gender, and college leads to cross-site scripting. The issue is exploitable remotely and the public disclosure has occurred. Some...

CVE-2024-12891

A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Affected is an unknown function of the file /account.php?q=quiz&step=2. The manipulation of the argument eid leads to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2024-12891

A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Affected is an unknown function of the file /account.php?q=quiz&step=2. The manipulation of the argument eid leads to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2024-12891

CVE-2024-12891 affects code-projects Online Exam Mastering System 1.0. Affected is an SQL injection in the function/file path /account.php?q=quiz&step=2, exploitable via manipulating the parameter eid . The issue enables remote exploitation and has been disclosed publicly. Root cause: unsafely ha...

CVE-2024-12891 code-projects Online Exam Mastering System account.php sql injection

A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Affected is an unknown function of the file /account.php?q=quiz&step=2. The manipulation of the argument eid leads to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2024-12891 code-projects Online Exam Mastering System account.php sql injection

A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Affected is an unknown function of the file /account.php?q=quiz&step=2. The manipulation of the argument eid leads to sql injection. It is possible to launch the attack remotely. The exploit h...