PHPEMS Deserialization Vulnerability

PHPEMS is a PHP online mock exam system. PHPEMS suffers from a deserialization vulnerability that stems from unsafe deserialization processing of lib/session.cls.php when receiving serialized data submitted by a user, which can be exploited by an attacker to cause code execution...

Information leakage vulnerability in the standard version of PHPEMS online simulation test system of Xinxiang City Falling Pen Thousand Words Network Technology Co.

PHPEMS online mock exam system is developed based on PHP+Mysql and supports multiple question types and presentation methods. The standard version of PHPEMS Online Mock Exam System of Xinxiang Falling Words Network Technology Co., Ltd. has an information leakage vulnerability, which can be...