online_exam_system vulnerabilities

2 known vulnerabilities in online_exam_system from Kashipara. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  online_exam_system: Improper Access Control

  CVE-2024-40480Aug 12, 2024Kashipara

  A Broken Access Control vulnerability was found in /admin/update.php and /admin/dashboard.php in Kashipara Online Exam System v1.0, which allows remote unauthenticated attackers to view administrator dashboard and delete valid user accounts via the direct URL

• 8.1 High severity

  online_exam_system: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-40479Aug 12, 2024Kashipara

  A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL commands via the "eid" parameter.