Vulnerabilities

TI-2022-21815 CVE-2022-44411 · GHSA-g7h8-52f9-cj26

Web Based Quiz System v1.0 transmits user passwords in plaintext during the…

LOW 39

Web Based Quiz System v1.0 transmits user passwords in plaintext during the authentication process, allowing attackers to obtain users' passwords via a bruteforce attack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0048 Published 2022-11-25 No fix listed CWE-319

TI-2022-15994 CVE-2022-35422 · GHSA-4vv7-9p6h-52f9

Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the qid parameter at update.php.

MEDIUM 44

Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the qid parameter at update.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00962 Published 2022-08-02 No fix listed CWE-89

TI-2022-14500 CVE-2022-32991 · GHSA-chmr-hq3h-fw8j

Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the eid parameter at welcome.php.

MEDIUM 40

Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the eid parameter at welcome.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01089 Published 2022-06-15 No fix listed CWE-89

TI-2021-09300 CVE-2021-28007 · GHSA-pqcv-hcrf-23q6

Web Based Quiz System 1.0 is affected by cross-site scripting (XSS) in register.php through the name parameter.

LOW 29

Web Based Quiz System 1.0 is affected by cross-site scripting (XSS) in register.php through the name parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00863 Published 2021-03-10 No fix listed CWE-79

TI-2021-09299 CVE-2021-28006 · GHSA-6v33-jp8c-5r5j

Web Based Quiz System 1.0 is affected by cross-site scripting (XSS) in admin.php through the options parameter.

LOW 29

Web Based Quiz System 1.0 is affected by cross-site scripting (XSS) in admin.php through the options parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00863 Published 2021-03-09 No fix listed CWE-79

Vulnerabilities

Filters

Web Based Quiz System v1.0 transmits user passwords in plaintext during the…

Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the qid parameter at update.php.

Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the eid parameter at welcome.php.

Web Based Quiz System 1.0 is affected by cross-site scripting (XSS) in register.php through the name parameter.

Web Based Quiz System 1.0 is affected by cross-site scripting (XSS) in admin.php through the options parameter.