Online Examination System vulnerabilities

8 known vulnerabilities in Online Examination System from Projectworlds Pvt.. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

8vulnerabilities

1critical

7high

0exploited

8.9average CVSS score

Latest first

8.8 High severity
Online Examination System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-45121Dec 21, 2023Projectworlds Pvt.
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'desc' parameter of the /update.php?q=addquiz resource does not validate the characters received and they are sent unfiltered to the database.
8.8 High severity
Online Examination System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-45120Dec 21, 2023Projectworlds Pvt.
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'qid' parameter of the /update.php?q=quiz&step=2 resource does not validate the characters received and they are sent unfiltered to the database.
8.8 High severity
Online Examination System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-45119Dec 21, 2023Projectworlds Pvt.
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'n' parameter of the /update.php?q=quiz resource does not validate the characters received and they are sent unfiltered to the database.
8.8 High severity
Online Examination System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-45118Dec 21, 2023Projectworlds Pvt.
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'fdid' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database.
8.8 High severity
Online Examination System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-45117Dec 21, 2023Projectworlds Pvt.
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'eid' parameter of the /update.php?q=rmquiz resource does not validate the characters received and they are sent unfiltered to the database.
8.8 High severity
Online Examination System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-45116Dec 21, 2023Projectworlds Pvt.
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'demail' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database.
8.8 High severity
Online Examination System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-45115Dec 21, 2023Projectworlds Pvt.
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'ch' parameter of the /update.php?q=addqns resource does not validate the characters received and they are sent unfiltered to the database.
9.8 Critical severity
Online Examination System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-45111Nov 2, 2023Projectworlds Pvt.
Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database.