CVE-2024-40478

Kashipara Online Exam System v1.0 is affected by a Stored Cross Site Scripting (XSS) vulnerability in the /admin/afeedback.php endpoint. The issue allows remote attackers to execute arbitrary code via the rname and email parameters, as described across multiple sources (CVE-2024-40478, NVD/other ...

CVE-2024-40480

CVE-2024-40480 affects Kashipara Online Exam System v1.0. The vulnerability is a Broken Access Control in /admin/update.php and /admin/dashboard.php that allows remote unauthenticated attackers to view the admin dashboard and delete valid user accounts via direct URL access. The issue is confirme...

CVE-2024-40479

The Kashipara Online Exam System v1.0 is affected by a SQL injection vulnerability located in the /admin/quizquestion.php endpoint. This flaw allows remote attackers to execute arbitrary SQL commands by exploiting the "eid" parameter . The vulnerability results in a High base severity (8.1) with ...

CVE-2025-51567

A SQL Injection vulnerability exists in the kashipara Online Exam System V1.0 within the /exam/user/profile.php page. The root cause is the use of unvalidated parameters —specifically rname, rcollage, rnumber, rgender, and rpassword—in a POST HTTP request . This flaw allows remote attackers to ex...