4 matches found
CVE-2021-34181
Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...
Cross site scripting
Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...
CVE-2021-34181
Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...
CVE-2021-34181
The connected documents confirm CVE-2021-34181 is a Cross Site Scripting (XSS) vulnerability in TomExam 3.0 exploitable via the p_name parameter passed to list.thtml. The root cause is an input handling/output encoding weakness that allows script injection. Affected software is TomExam 3.0; no ex...