CVE-2012-2096

The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via a negative value in the vote parameter...

CVE-2024-5116

A vulnerability, which was classified as critical, has been found in SourceCodester Online Examination System 1.0. Affected by this issue is some unknown functionality of the file save.php. The manipulation of the argument vote leads to sql injection. The attack may be launched remotely. The...

SourceCodester Online Examination System SQL Injection Vulnerability

SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Online Examination System version 1.0, which originates from an unknown function in save.php that causes SQL injection via the parameter vote...

PT-2024-34543 · Sourcecodester · Sourcecodester Online Examination System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Examination System version 1.0 Description: A critical issue has been found in the SourceCodester Online Examination System, affecting some unknown functionality of the file save.php. The manipulation of the vote argumen...

PT-2012-3804

Name of the Vulnerable Software and Affected Versions Fivestar module versions prior to 6.x-1.20 for Drupal Description The issue allows remote attackers to manipulate voting averages by providing a negative value in the vote parameter, due to improper validation of voting data. Recommendations F...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Qsoft K-Rate Premium allow remote attackers to inject arbitrary web script or HTML via the blog, possibly the 1 Title and 2 Text fields; 3 the gallery, possibly the Description field in Your Pictures; 4 the forum, possibly the Your Message fiel...

CVE-2008-7098

Multiple cross-site scripting XSS vulnerabilities in Qsoft K-Rate Premium allow remote attackers to inject arbitrary web script or HTML via the blog, possibly the 1 Title and 2 Text fields; 3 the gallery, possibly the Description field in Your Pictures; 4 the forum, possibly the Your Message fiel...

CVE-2008-7098

Multiple cross-site scripting XSS vulnerabilities in Qsoft K-Rate Premium allow remote attackers to inject arbitrary web script or HTML via the blog, possibly the 1 Title and 2 Text fields; 3 the gallery, possibly the Description field in Your Pictures; 4 the forum, possibly the Your Message fiel...