CVE-2026-4973: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in SourceCodester Online Quiz System up to 1.0. Affected by this vulnerability is an unknown functionality of the file endpoint/add-question.php. Performing a manipulation of the argument quizquestion results in cross site scripting. It is possible to initiate the...

EUVD-2005-0476

Malware in sbrugna...

PT-2021-23647

Name of the Vulnerable Software and Affected Versions Sourcecodester Engineers Online Portal affected versions not specified Description A SQL Injection issue exists in the Sourcecodester Engineers Online Portal in PHP, specifically via the id parameter to "quiz question.php". This could allow a...

CVE-2020-20583: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /question.php of LJCMS Version v4.3.R60321 allows attackers to obtain sensitive database information...

PT-2021-10507

Name of the Vulnerable Software and Affected Versions: LJCMS version v4.3.R60321 Description: A SQL injection issue in the /question.php endpoint of LJCMS allows attackers to obtain sensitive database information. Recommendations: For version v4.3.R60321, as a temporary workaround, consider...

Tipask 2.5 /control/question.php SQL注入漏洞

No description provided by source...

Tipask v2.5 question.php 存在储存型xss漏洞

No description provided by source...

CVE-2014-100022: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in question.php in the mTouch Quiz before 3.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the quiz parameter to wp-admin/edit.php...

WordPress mTouch Quiz Plugin <= 3.0.6 - SQL Injection

Because of this vulnerability in question.php, the attackers can execute arbitrary SQL commands via the "quiz" parameter to wp-admin/edit.php. Solution Update the plugin...

CVE-2014-100023: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in question.php in the mTouch Quiz before 3.0.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the quiz parameter to wp-admin/edit.php...

tipask quiz system 2. 0SQL time of the blind injection vulnerability-vulnerability warning-the black bar safety net

File /model/question.php function ontag $tag = urldecode$this-get'2'; //secondary code to bypass //echo $tag; $encodeword = urlencode$tag; $navtitle = $tag . '-Tag search'; $qstatus = $status = intval$this-get3; !$ status && $qstatus = "1,2,6"; $startindex = $page - 1 $pagesize; $rownum =...

Tipask 2.0 /control/question.php SQL注入漏洞

No description provided by source...

tipask 2.0 quiz system to allow the right to exploit-vulnerability warning-the black bar safety net

0x001 frontier Tipask quiz system is an open source PHP imitation Baidu know the program. To the Chinese use habit of the design concept, the use of the MVC framework, the system has a fast speed, SEO-friendly, the interface operation is clean and clear and other characteristics. 0x002...

PT-2012-5269

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 11.3.008 Description The issue allows remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands. This can be achieved via the subject module id parameter to 1 "tce edit answer.php...

sX-Shop - Multiple SQL Injections

sX-Shop - Multiple SQL Injections sX-Shop SQL Injection Vulnerabilities Author : CoBRa21 Author Web Page :http://ipbul.org Dork : "powered by sX-Shop" Script Page : http://www.source-worx.de/ Sql Injection : http://localhost/path/index.php?product=513' Sql http://localhost/path/question.php?id=-5...

CVE-2009-1843

Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands via the 1 quiz parameter to a numquestions.php, b answers.php, c highscore.php, d highscoreweb.php, e resultstableweb.php, and f question.php; and the 2 ordernumber parameter to g...

CVE-2009-1843

Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands via the 1 quiz parameter to a numquestions.php, b answers.php, c highscore.php, d highscoreweb.php, e resultstableweb.php, and f question.php; and the 2 ordernumber parameter to g...

Sql injection

Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execute arbitrary SQL commands via the ID parameter to 1 email.php and 2 question.php, a different vector than CVE-2008-1909...

CVE-2008-5088: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execute arbitrary SQL commands via the ID parameter to 1 email.php and 2 question.php, a different vector than CVE-2008-1909...

PHPKB 1.5 Professional Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== PHPKB 1.5 Professional Multiple Remote SQL Injection Vulnerabilities ==================================================================== PHPKB Knowledge Base Software v1...