Projectworlds Pvt. Limited Online Examination System vulnerabilities
11 vulnerabilities
Known vulnerabilities in Projectworlds Pvt. Limited Online Examination System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-45117projectworlds pvt. limitedonline examination system+1
EPSS score0.51%
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'eid' parameter of the /update.php?q=rmquiz resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45120projectworlds pvt. limitedonline examination system+1EPSS score0.65%
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'qid' parameter of the /update.php?q=quiz&step=2 resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45111online_examination_system_projectonline_examination_system+1EPSS score0.70%
Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45116projectworlds pvt. limitedonline examination system+1EPSS score0.67%
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'demail' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45115projectworlds pvt. limitedonline examination system+1EPSS score0.67%
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'ch' parameter of the /update.php?q=addqns resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45118projectworlds pvt. limitedonline examination system+1EPSS score0.67%
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'fdid' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45203projectworlds pvt. limitedonline examination system+1EPSS score0.41%
Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the login.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL.CVE-2023-45202projectworlds pvt. limitedonline examination system+1EPSS score0.41%
Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL.CVE-2023-45201projectworlds pvt. limitedonline examination system+1EPSS score0.39%
Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL.CVE-2023-45121projectworlds pvt. limitedonline examination system+1EPSS score0.67%
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'desc' parameter of the /update.php?q=addquiz resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45119projectworlds pvt. limitedonline examination system+1EPSS score0.67%
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'n' parameter of the /update.php?q=quiz resource does not validate the characters received and they are sent unfiltered to the database.