CVE-2020-26006

Description

References

• projectworldsofficial/online-examination-systen-in-php · Product
• nikhilkumar01.medium.com/cve-2020-26006-31f847e16019 · Third Party Advisory

online examination system 的其他漏洞

• CVE-2023-45111严重 9.8Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.ph…
• CVE-2023-36256中危 6.5The Online Examination System Project 1.0 version is vulnerable to Cross-Site Request Forgery (CSRF) attacks. An attacker can craft a malici…
• CVE-2020-25411中危 6.5Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user.
• CVE-2020-29259中危 5.4Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php.
• CVE-2020-29258中危 6.1Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the w parameter to index.php.