Lucene search
+L

157 matches found

CNNVD
CNNVD
added 2024/08/01 12:00 a.m.9 views

SourceCodester Simple Realtime Quiz System 安全漏洞

SourceCodester Simple Realtime Quiz System is a real-time quiz system from SourceCodester, Inc. A security vulnerability exists in version 1.0 of the SourceCodester Simple Realtime Quiz System, which stems from an SQL injection vulnerability in the id parameter of the /managequiz.php file...

8.8CVSS7AI score0.0049EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/08/01 12:00 a.m.12 views

SourceCodester Simple Realtime Quiz System SQL注入漏洞

SourceCodester Simple Realtime Quiz System is a real-time quiz system from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Simple Realtime Quiz System version 1.0, which stems from an SQL injection vulnerability in the quiz parameter of the /quizboard.php file...

8.8CVSS7AI score0.00509EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/08/01 12:00 a.m.9 views

PT-2024-38302 · Unknown · Sourcecodester Simple Realtime Quiz System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Realtime Quiz System version 1.0 Description: A critical issue has been identified, affecting an unknown functionality of the file /quiz view.php. The manipulation of the id argument leads to SQL injection. This issue ca...

8.8CVSS8AI score0.00509EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/08/01 12:00 a.m.17 views

PT-2024-38303 · Sourcecodester · Sourcecodester Simple Realtime Quiz System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Realtime Quiz System version 1.0 Description: A critical issue affects some unknown functionality of the file /quiz board.php. The manipulation of the quiz argument leads to SQL injection. The attack can be launched...

8.8CVSS8.2AI score0.00509EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2024/08/01 12:00 a.m.11 views

PT-2024-38299 · Sourcecodester · Sourcecodester Simple Realtime Quiz System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Realtime Quiz System version 1.0 Description: A problematic issue has been found, affecting the /ajax.php?action=save quiz file. The manipulation of the title argument leads to cross-site scripting. This issue can be...

5.4CVSS6.5AI score0.00401EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/08/01 12:00 a.m.13 views

PT-2024-38300 · Sourcecodester · Sourcecodester Simple Realtime Quiz System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Realtime Quiz System version 1.0 Description: A critical issue affects the processing of the file "/ajax.php?action=login" in the Login component. The manipulation of the username argument leads to SQL injection. This...

9.8CVSS8AI score0.00635EPSS
SaveExploits1References6
OSV
OSV
added 2023/12/02 9:15 p.m.10 views

CVE-2023-6473

A vulnerability, which was classified as problematic, was found in SourceCodester Online Quiz System 1.0. This affects an unknown part of the file take-quiz.php. The manipulation of the argument quiztaker/yearsection leads to cross site scripting. It is possible to initiate the attack remotely. T...

5.4CVSS4AI score0.00604EPSS
SaveExploits1References3
NVD
NVD
added 2023/12/02 9:15 p.m.24 views

CVE-2023-6473

A vulnerability, which was classified as problematic, was found in SourceCodester Online Quiz System 1.0. This affects an unknown part of the file take-quiz.php. The manipulation of the argument quiztaker/yearsection leads to cross site scripting. It is possible to initiate the attack remotely. T...

5.4CVSS0.00604EPSS
SaveExploits1References3
Prion
Prion
added 2023/12/02 9:15 p.m.22 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Online Quiz System 1.0. This affects an unknown part of the file take-quiz.php. The manipulation of the argument quiztaker/yearsection leads to cross site scripting. It is possible to initiate the attack remotely. T...

4CVSS6.4AI score0.00604EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/02 8:31 p.m.35 views

CVE-2023-6473 SourceCodester Online Quiz System take-quiz.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Online Quiz System 1.0. This affects an unknown part of the file take-quiz.php. The manipulation of the argument quiztaker/yearsection leads to cross site scripting. It is possible to initiate the attack remotely. T...

4CVSS5.5AI score0.00604EPSS
SaveExploits1References3
CVE
CVE
added 2023/12/02 8:31 p.m.44 views

CVE-2023-6473

CVE-2023-6473 affects SourceCodester Online Quiz System 1.0. The vulnerability is a cross-site scripting flaw in an unknown part of take-quiz.php, triggered by manipulating the quiz_taker/year_section parameter. The advisory notes remote initiation and public disclosure of the exploit, implying p...

5.4CVSS4.4AI score0.00604EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/12/02 12:00 a.m.9 views

SourceCodester Online Quiz System Cross-Site Scripting Vulnerability

Online Quiz System is an online testing platform. A cross-site scripting vulnerability exists in SourceCodester Online Quiz System version 1.0, which stems from a cross-site scripting XSS vulnerability in the parameter quiztaker/yearsection...

5.4CVSS5.9AI score0.00604EPSS
SaveExploits1References3
CNVD
CNVD
added 2022/11/29 12:00 a.m.44 views

Web Based Quiz System Information Disclosure Vulnerability

Web Based Quiz System is a web based quiz system for janobe individual developers. A vulnerability exists in Web Based Quiz System v1.0, which can be exploited by attackers to obtain a user's password via brute-force cracking...

7.5CVSS7.5AI score0.00447EPSS
SaveExploits1References1
OSV
OSV
added 2022/11/25 4:15 p.m.12 views

CVE-2022-44411

Web Based Quiz System v1.0 transmits user passwords in plaintext during the authentication process, allowing attackers to obtain users' passwords via a bruteforce attack...

7.5CVSS5.8AI score0.00447EPSS
SaveExploits1References1
NVD
NVD
added 2022/11/25 4:15 p.m.24 views

CVE-2022-44411

Web Based Quiz System v1.0 transmits user passwords in plaintext during the authentication process, allowing attackers to obtain users' passwords via a bruteforce attack...

7.5CVSS0.00447EPSS
SaveExploits1References1
Prion
Prion
added 2022/11/25 4:15 p.m.17 views

Authentication flaw

Web Based Quiz System v1.0 transmits user passwords in plaintext during the authentication process, allowing attackers to obtain users' passwords via a bruteforce attack...

5CVSS7.5AI score0.00447EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/11/25 12:00 a.m.60 views

CVE-2022-44411

CVE-2022-44411 affects Web Based Quiz System v1.0, where authentication transmits passwords in plaintext, enabling password disclosure via brute-force attacks. The linked metrics indicate high confidentiality impact (C:H) with network attack vector and low attack complexity, no integrity or avail...

7.5CVSS7.4AI score0.00447EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/25 12:00 a.m.8 views

CVE-2022-44411

Web Based Quiz System v1.0 transmits user passwords in plaintext during the authentication process, allowing attackers to obtain users' passwords via a bruteforce attack...

7.5AI score0.00447EPSS
SaveExploits1References1
OSV
OSV
added 2022/08/02 3:15 a.m.7 views

CVE-2022-35422

Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the qid parameter at update.php...

9.8CVSS5.8AI score0.00914EPSS
SaveExploits1References1
Prion
Prion
added 2022/08/02 3:15 a.m.26 views

Sql injection

Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the qid parameter at update.php...

7.5CVSS9.7AI score0.00914EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder