Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Jayesh Component: Online Exam System Clear all filters
TI-2025-32367 CVE-2025-51567 · GHSA-xfhq-47hp-mvcx

A SQL Injection was found in the /exam/user/profile.php page of kashipara Online Exam…

Priority HIGH 78

A SQL Injection was found in the /exam/user/profile.php page of kashipara Online Exam System V1.0, which allows remote attackers to execute arbitrary SQL command to get unauthorized database access via the rname, rcollag…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00411 Published 2026-01-12 No fix listed CWE-89
TI-2024-26946 CVE-2024-40480 · GHSA-rmh7-px2g-m7q9

A Broken Access Control vulnerability was found in /admin/update.php and…

Priority HIGH 75

A Broken Access Control vulnerability was found in /admin/update.php and /admin/dashboard.php in Kashipara Online Exam System v1.0, which allows remote unauthenticated attackers to view administrator dashboard and delete…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00534 Published 2024-08-09 No fix listed CWE-284
TI-2024-26944 CVE-2024-40478 · GHSA-c3hg-qcg2-fhv2

A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/afeedback.php" in…

Priority LOW 25

A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/afeedback.php" in Kashipara Online Exam System v1.0, which allows remote attackers to execute arbitrary code via "rname" and "email" parameter fields

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0064 Published 2024-08-09 No fix listed CWE-79