6 matches found
CVE-2021-34181
Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...
PT-2022-10325 · Tomexam · Tomexam
Name of the Vulnerable Software and Affected Versions: TomExam version 3.0 Description: The issue is a Cross Site Scripting XSS vulnerability. It can be exploited via the p name parameter in the "list.thtml" endpoint. This allows for malicious script execution. Recommendations: For TomExam versio...
TomExam Cross-site Scripting Vulnerabilities
TomExam is a free and efficient online exam system software. TomExam version 3.0 suffers from a cross-site scripting XSS vulnerability that can be exploited by an attacker to cause cross-site scripting XSS via the pname parameter passed to list.thtml...
PT-2019-7351
Name of the Vulnerable Software and Affected Versions users-ultra plugin versions prior to 1.5.63 Description The issue concerns a cross-site scripting XSS flaw. It is exploited via the p name parameter. Recommendations For versions prior to 1.5.63, update to version 1.5.63 or later to resolve th...
PHP Scripts Mall Entrepreneur Job Portal Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Entrepreneur Job Portal Script is a set of PHP based recruitment, job search website scripts by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Entrepreneur Job Portal Script. A remote attacker can exploit this vulnerability by sending the...
PT-2018-18085
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Entrepreneur Job Portal Script version 2.0.9 Description The issue concerns a Cross-Site Scripting XSS flaw. It is located in the p name field, also known as the Edit Category Name field, which is accessible through the...