Vulnerabilities

TI-2023-24141 CVE-2023-45111 · GHSA-3r2p-99p3-62vg

Online Examination System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

HIGH 82

Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00836 Published 2023-11-02 No fix listed CWE-89

TI-2023-18175 CVE-2023-36256 · GHSA-qgpm-qvc5-59rm

MEDIUM 62

The Online Examination System Project 1.0 version is vulnerable to Cross-Site Request Forgery (CSRF) attacks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00382 Published 2023-07-07 No fix listed CWE-352

TI-2020-15892 CVE-2020-26006 · GHSA-hmm7-39qh-h2pq

LOW 28

Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting (XSS) via account.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00685 Published 2021-05-24 No fix listed CWE-79

TI-2020-15548 CVE-2020-25411 · GHSA-vpcf-7w94-c5f2

LOW 30

Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00658 Published 2021-05-24 No fix listed CWE-352

TI-2020-17622 CVE-2020-29259 · GHSA-r346-r4r7-jqhf

LOW 26

Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00673 Published 2020-12-09 No fix listed CWE-79

TI-2020-17621 CVE-2020-29258 · GHSA-f7v5-p6x6-2823

LOW 28

Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the w parameter to index.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00686 Published 2020-12-09 No fix listed CWE-79

TI-2020-17620 CVE-2020-29257 · GHSA-9hfm-mhvm-8rx7

LOW 28

Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the q parameter to feedback.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.007 Published 2020-12-09 No fix listed CWE-79