CveMateVulnerability intelligence

Projectworlds Online Examination System vulnerabilities

17 vulnerabilities

Known vulnerabilities in Projectworlds Online Examination System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2021-46307projectworldsonline_examination_system4y ago21-01-2022 15:59

An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php.CVE-2025-4706projectworldsonline_examination_system1y ago15-05-2025 16:31

A vulnerability was found in projectworlds Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Procedure3b_yearwiseVisit.php. The manipulation of the argument Visit_year leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.CVE-2025-4058projectworldsonline_examination_system1y ago29-04-2025 11:31

A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0. This affects an unknown part of the file /Bloodgroop_process.php. The manipulation of the argument Pat_BloodGroup1 leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.CVE-2025-4034projectworldsonline_examination_system1y ago28-04-2025 19:31

A vulnerability classified as critical was found in projectworlds Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /inser_doc_process.php. The manipulation of the argument Doc_ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.CVE-2022-42066projectworldsonline_examination_system4y ago14-10-2022 00:00

Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php.CVE-2024-42843projectworldsonline_examination_system2y ago15-08-2024 00:00

Projectworlds Online Examination System v1.0 is vulnerable to SQL Injection via the subject parameter in feed.php.CVE-2026-86238projectworldsonline_examination_system1mo ago07-09-2026 00:30

A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.CVE-2023-45117projectworlds pvt. limitedonline examination system+12y ago21-12-2023 15:47

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'eid' parameter of the /update.php?q=rmquiz resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45120projectworlds pvt. limitedonline examination system+12y ago21-12-2023 16:21

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'qid' parameter of the /update.php?q=quiz&step=2 resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45116projectworlds pvt. limitedonline examination system+12y ago21-12-2023 15:42

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'demail' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45115projectworlds pvt. limitedonline examination system+12y ago21-12-2023 15:36

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'ch' parameter of the /update.php?q=addqns resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45118projectworlds pvt. limitedonline examination system+12y ago21-12-2023 15:51

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'fdid' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45203projectworlds pvt. limitedonline examination system+12y ago01-11-2023 22:11

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the login.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL.CVE-2023-45202projectworlds pvt. limitedonline examination system+12y ago01-11-2023 22:02

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL.CVE-2023-45201projectworlds pvt. limitedonline examination system+12y ago01-11-2023 21:53

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL.CVE-2023-45121projectworlds pvt. limitedonline examination system+12y ago21-12-2023 16:23

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'desc' parameter of the /update.php?q=addquiz resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45119projectworlds pvt. limitedonline examination system+12y ago21-12-2023 16:03

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'n' parameter of the /update.php?q=quiz resource does not validate the characters received and they are sent unfiltered to the database.