CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-10353 – SourceCodester Online Exam System admin-dashboard access control
https://notcve.org/view.php?id=CVE-2024-10353
A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /admin-dashboard. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://drive.google.com/file/d/1hEXfbOOkWdYzaSI6ORQvPGBtn09R12Ui/view?usp=drive_link https://vuldb.com/?ctiid.281700 https://vuldb.com/?id.281700 https://vuldb.com/?submit.427957 https://www.sourcecodester.com • CWE-284: Improper Access Control •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-2771 – SourceCodester Online Exam System data sql injection
https://notcve.org/view.php?id=CVE-2023-2771
A vulnerability, which was classified as critical, has been found in SourceCodester Online Exam System 1.0. This issue affects some unknown processing of the file /jurusanmatkul/data. The manipulation of the argument columns[1][data] leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/tht1997/CVE_2023/blob/main/online_exam/kelasdosen.md https://vuldb.com/?ctiid.229277 https://vuldb.com/?id.229277 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-2770 – SourceCodester Online Exam System data sql injection
https://notcve.org/view.php?id=CVE-2023-2770
A vulnerability classified as critical was found in SourceCodester Online Exam System 1.0. This vulnerability affects unknown code of the file /kelasdosen/data. The manipulation of the argument columns[1][data] leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/tht1997/CVE_2023/blob/main/online_exam/kelasdosen.md https://vuldb.com/?ctiid.229276 https://vuldb.com/?id.229276 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-2697 – SourceCodester Online Exam System POST Parameter data sql injection
https://notcve.org/view.php?id=CVE-2023-2697
A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /jurusan/data of the component POST Parameter Handler. The manipulation of the argument columns[1][data] leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/img/jurusan_data.png https://vuldb.com/?ctiid.228978 https://vuldb.com/?id.228978 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-2696 – SourceCodester Online Exam System POST Parameter data sql injection
https://notcve.org/view.php?id=CVE-2023-2696
A vulnerability was found in SourceCodester Online Exam System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /matkul/data of the component POST Parameter Handler. The manipulation of the argument columns[1][data] leads to sql injection. The attack may be initiated remotely. • https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/img/matkul_data.png https://vuldb.com/?ctiid.228977 https://vuldb.com/?id.228977 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •