CVE-2025-28121

The code-projects Online Exam Mastering System 1.0 is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability within the feedback.php file. The root cause is the application's failure to properly sanitize or encode user input provided via the "q" parameter , which allows remote attacke...

CVE-2024-12891

CVE-2024-12891 affects code-projects Online Exam Mastering System 1.0. Affected is an SQL injection in the function/file path /account.php?q=quiz&step=2, exploitable via manipulating the parameter eid . The issue enables remote exploitation and has been disclosed publicly. Root cause: unsafely ha...

CVE-2024-12890

CVE-2024-12890 affects code-projects Online Exam Mastering System 1.0. A vulnerability in the endpoint /update.php?q=quiz&step=2 allows SQL injection via the eid parameter, enabling remote exploitation. Public exploitation is indicated by the sources. The available documents do not specify a vend...

CVE-2025-46173

The code-projects Online Exam Mastering System 1.0 is vulnerable to Stored Cross-Site Scripting (XSS) via the name field in the feedback.php form. The vulnerability exists because user input is not properly sanitized before being rendered in the dash.php administration panel. A malicious actor ca...

CVE-2024-12892

CVE-2024-12892 affects code-projects Online Exam Mastering System 1.0. The vulnerability is in the file /sign.php?q=account.php, where manipulating the arguments name, gender, and college leads to cross-site scripting. The issue is exploitable remotely and the public disclosure has occurred. Some...