Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior
Críticas / altas1383▼ 38 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior
61 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 0.41% | — | Projectworlds Online Examination System | 1/11/2023 | 17/6/2026 | Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. | |
| Modificada | Media (6.1) | 0.39% | — | Projectworlds Online Examination System | 1/11/2023 | 17/6/2026 | Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. | |
| Modificada | Media (6.5) | 0.38% | — | Online Examination System Project Online Examination System | 7/7/2023 | 17/6/2026 | The Online Examination System Project 1.0 version is vulnerable to Cross-Site Request Forgery (CSRF) attacks. An attacker can craft a malicious link that, when clicked by an admin user, will delete a user account from the database without the admin's consent. The email of the user to be deleted is passed as a… | |
| Modificada | Media (6.1) | 0.61% | — | Projectworlds Online Examination System | 14/10/2022 | 17/6/2026 | Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php. | |
| Modificada | Crítica (9.8) | 1.6% | — | Projectworlds Online Examination System | 21/1/2022 | 17/6/2026 | An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php. | |
| Modificada | Media (6.1) | 0.69% | — | Online Examination System Project Online Examination System | 24/5/2021 | 17/6/2026 | Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting (XSS) via account.php. | |
| Modificada | Media (6.5) | 0.66% | — | Online Examination System Project Online Examination System | 24/5/2021 | 17/6/2026 | Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user. | |
| Modificada | Media (5.4) | 0.67% | — | Online Examination System Project Online Examination System | 9/12/2020 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php. | |
| Modificada | Media (6.1) | 0.69% | — | Online Examination System Project Online Examination System | 9/12/2020 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the w parameter to index.php. | |
| Modificada | Media (6.1) | 0.70% | — | Online Examination System Project Online Examination System | 9/12/2020 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the q parameter to feedback.php. | |
| Modificada | Alta (7.5) | 9.1% | 💥 Exploit | Digitalvidhya Digi Online Examination System | 20/11/2014 | 17/6/2026 | Unrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online Examination System 2.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in assets/uploads/images/. |