CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2022-42066
https://notcve.org/view.php?id=CVE-2022-42066
Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php. Online Examination System versión 1.0, sufre una vulnerabilidad de tipo Cross Site Scripting por medio del archivo index.php • https://packetstormsecurity.com/files/168549/Online-Examination-System-1.0-Cross-Site-Scripting.html https://projectworlds.in/free-projects/php-projects/online-examination • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1CVE-2021-46307
https://notcve.org/view.php?id=CVE-2021-46307
An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php. Se presenta una vulnerabilidad de inyección SQL en Projectworlds Online Examination System versión 1.0, por medio del parámetro eid en el archivo account.php • https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/Projectworlds/2022/Online%20Examination%20System • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •