Page 2 of 16 results (0.005 seconds)

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-45115 – Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)

https://notcve.org/view.php?id=CVE-2023-45115

21 Dec 2023 — Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'ch' parameter of the /update.php?q=addqns resource does not validate the characters received and they are sent unfiltered to the database. Online Examination System v1.0 es afectado por múltiples vulnerabilidades de inyección SQL autenticadas. El parámetro 'ch' del recurso update.php no valida los caracteres recibidos y se envían sin filtrar a la base de datos. • https://fluidattacks.com/advisories/argerich • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-45203 – Online Examination System v1.0 - Multiple Open Redirects

https://notcve.org/view.php?id=CVE-2023-45203

01 Nov 2023 — Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the login.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. Online Examination System v1.0 es afectado por múltiples vulnerabilidades de Open Redirect. El parámetro 'q' del recurso login.php permite a un atacante redirigir a un usuario víctima a un sitio web arbitrario utilizando una URL manipulada. • https://fluidattacks.com/advisories/uchida • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-45202 – Online Examination System v1.0 - Multiple Open Redirects

https://notcve.org/view.php?id=CVE-2023-45202

01 Nov 2023 — Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. Online Examination System v1.0 es afectado por múltiples vulnerabilidades de Open Redirect. El parámetro 'q' del recurso feed.php permite a un atacante redirigir a un usuario víctima a un sitio web arbitrario utilizando una URL manipulada. • https://fluidattacks.com/advisories/uchida • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-45201 – Online Examination System v1.0 - Multiple Open Redirects

https://notcve.org/view.php?id=CVE-2023-45201

01 Nov 2023 — Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. Online Examination System v1.0 es afectado por múltiples vulnerabilidades de Open Redirect. El parámetro 'q' del recurso admin.php permite a un atacante redirigir a un usuario víctima a un sitio web arbitrario utilizando una URL manipulada. Online Examination System v1.0 is vulnerable to ... • https://fluidattacks.com/advisories/uchida • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-42066

https://notcve.org/view.php?id=CVE-2022-42066

14 Oct 2022 — Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php. Online Examination System versión 1.0, sufre una vulnerabilidad de tipo Cross Site Scripting por medio del archivo index.php • https://packetstormsecurity.com/files/168549/Online-Examination-System-1.0-Cross-Site-Scripting.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1

CVE-2021-46307

https://notcve.org/view.php?id=CVE-2021-46307

21 Jan 2022 — An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php. Se presenta una vulnerabilidad de inyección SQL en Projectworlds Online Examination System versión 1.0, por medio del parámetro eid en el archivo account.php • https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/Projectworlds/2022/Online%20Examination%20System • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •