VendorsOnline Examination System Projectonline_examination_systemall versions
Vulnerabilities

Online Examination System Project Online Examination System

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2023-45111
Online Examination System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Published 2023-11-02 · Modified
9.8EPSS 0.007
CVE-2020-25411
Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user.
Published 2021-05-24 · Modified
6.5EPSS 0.007
CVE-2023-36256
The Online Examination System Project 1.0 version is vulnerable to Cross-Site Request Forgery (CSRF) attacks. An attacker can craft a malicious link that, when clicked by an admin user, will delete a user account from the database without the admin's consent. The email of the user to be deleted is passed as a parameter in the URL, which can be manipulated by the attacker. This could result in a loss of data.
Published 2023-07-07 · Modified
6.5EPSS 0.004
CVE-2020-29257
Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the q parameter to feedback.php.
Published 2020-12-09 · Modified
6.1EPSS 0.007
CVE-2020-29258
Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the w parameter to index.php.
Published 2020-12-09 · Modified
6.1EPSS 0.007
CVE-2020-26006
Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting (XSS) via account.php.
Published 2021-05-24 · Modified
6.1EPSS 0.007
CVE-2020-29259
Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php.
Published 2020-12-09 · Modified
5.4EPSS 0.007