CVE-2020-26006

Description

References

• projectworldsofficial/online-examination-systen-in-php · Product
• nikhilkumar01.medium.com/cve-2020-26006-31f847e16019 · Third Party Advisory

Mais vulnerabilidades de online examination system

• CVE-2023-45111CRÍTICO 9.8Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.ph…
• CVE-2023-36256MÉDIO 6.5The Online Examination System Project 1.0 version is vulnerable to Cross-Site Request Forgery (CSRF) attacks. An attacker can craft a malici…
• CVE-2020-25411MÉDIO 6.5Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user.
• CVE-2020-29259MÉDIO 5.4Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php.
• CVE-2020-29258MÉDIO 6.1Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the w parameter to index.php.