Online Examination System Project

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Online Examination System Project records in CISA KEV

No Online Examination System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Online Examination System 7 records HIGH

Records

7 records in Online Examination System · all components

TI-2023-24141 CVE-2023-45111 · GHSA-3r2p-99p3-62vg

Online Examination System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

HIGH 82

Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00836 Published 2023-11-02 No fix listed CWE-89

TI-2023-18175 CVE-2023-36256 · GHSA-qgpm-qvc5-59rm

The Online Examination System Project 1.0 version is vulnerable to Cross-Site Request…

MEDIUM 62

The Online Examination System Project 1.0 version is vulnerable to Cross-Site Request Forgery (CSRF) attacks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00382 Published 2023-07-07 No fix listed CWE-352

TI-2020-15548 CVE-2020-25411 · GHSA-vpcf-7w94-c5f2

Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote…

LOW 30

Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00658 Published 2021-05-24 No fix listed CWE-352

TI-2020-17621 CVE-2020-29258 · GHSA-f7v5-p6x6-2823

Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the w parameter to index.php.

LOW 28

Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the w parameter to index.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00686 Published 2020-12-09 No fix listed CWE-79

TI-2020-17620 CVE-2020-29257 · GHSA-9hfm-mhvm-8rx7

Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the q parameter to feedback.php.

LOW 28

Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the q parameter to feedback.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.007 Published 2020-12-09 No fix listed CWE-79

TI-2020-15892 CVE-2020-26006 · GHSA-hmm7-39qh-h2pq

Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting (XSS) via account.php.

LOW 28

Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting (XSS) via account.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00685 Published 2021-05-24 No fix listed CWE-79

TI-2020-17622 CVE-2020-29259 · GHSA-r346-r4r7-jqhf

Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the subject…

LOW 26

Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00673 Published 2020-12-09 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	6
Low	0
No CVSS	0