Priority HIGH 82
Projectworlds Online Examination System v1.0 is vulnerable to SQL Injection via the subject parameter in feed.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0062 · Published 2024-08-15 · No fix listed CWE-89
Priority HIGH 70
A vulnerability was found in projectworlds Online Examination System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00562 · Published 2025-05-15 · No fix listed CWE-74
Priority HIGH 70
A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00562 · Published 2025-04-29 · No fix listed CWE-74
Priority HIGH 70
A vulnerability classified as critical was found in projectworlds Online Examination System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00555 · Published 2025-04-28 · No fix listed CWE-74
Priority MEDIUM 60
Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00695 · Published 2022-10-14 · No fix listed CWE-79
Priority MEDIUM 47
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00646 · Published 2023-12-21 · No fix listed CWE-89
Priority MEDIUM 47
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00507 · Published 2023-12-21 · No fix listed CWE-89
Priority MEDIUM 47
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00673 · Published 2023-12-21 · No fix listed CWE-89
Priority MEDIUM 47
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00673 · Published 2023-12-21 · No fix listed CWE-89
Priority MEDIUM 45
An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01556 · Published 2022-01-21 · No fix listed CWE-89
Priority LOW 39
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00673 · Published 2023-12-21 · No fix listed CWE-89
Priority LOW 39
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00673 · Published 2023-12-21 · No fix listed CWE-89
Priority LOW 39
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00673 · Published 2023-12-21 · No fix listed CWE-89
Priority LOW 28
Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00472 · Published 2023-11-01 · No fix listed CWE-601
Priority LOW 28
Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00472 · Published 2023-11-01 · No fix listed CWE-601
Priority LOW 28
Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00453 · Published 2023-11-01 · No fix listed CWE-601
THREATIST.IORead the docs