Online Examination System Project
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Online Examination System Project records in CISA KEVNo Online Examination System Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00836 · Published 2023-11-02 · No fix listed CWE-89
Priority MEDIUM 62
The Online Examination System Project 1.0 version is vulnerable to Cross-Site Request Forgery (CSRF) attacks.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00382 · Published 2023-07-07 · No fix listed CWE-352
Priority LOW 30
Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00658 · Published 2021-05-24 · No fix listed CWE-352
Priority LOW 28
Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the w parameter to index.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00686 · Published 2020-12-09 · No fix listed CWE-79
Priority LOW 28
Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the q parameter to feedback.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.007 · Published 2020-12-09 · No fix listed CWE-79
Priority LOW 28
Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting (XSS) via account.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00685 · Published 2021-05-24 · No fix listed CWE-79
Priority LOW 26
Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00673 · Published 2020-12-09 · No fix listed CWE-79
Open these records in search →