« Back to list

Projectworlds

Projectworlds Online Examination System: vulnerabilities and CVEs

Projectworlds Online Examination System has 17 published vulnerabilities, 1 of them in the last 12 months. 2 are rated critical and 0 are listed by CISA as actively exploited.

CVEs17
Last 12 months1
Critical2
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2026-86238Low (2.1)0.45%—Sep 7, 2026
A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the…
CVE-2025-4706Medium (6.9)0.51%—May 15, 2025
A vulnerability was found in projectworlds Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Procedure3b_yearwiseVisit.php. The manipulation of the…
CVE-2025-4058Medium (6.9)0.56%—Apr 29, 2025
A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0. This affects an unknown part of the file /Bloodgroop_process.php. The manipulation of the argument Pat_BloodGroup1…
CVE-2025-4034Medium (6.9)0.56%—Apr 28, 2025
A vulnerability classified as critical was found in projectworlds Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /inser_doc_process.php. The manipulation of the…
CVE-2024-42843Critical (9.8)0.62%—Aug 15, 2024
Projectworlds Online Examination System v1.0 is vulnerable to SQL Injection via the subject parameter in feed.php.
CVE-2023-45121High (8.8)0.67%—Dec 21, 2023
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'desc' parameter of the /update.php?q=addquiz resource does not validate the characters received and they are…
CVE-2023-45120High (8.8)0.65%—Dec 21, 2023
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'qid' parameter of the /update.php?q=quiz&step=2 resource does not validate the characters received and they are…
CVE-2023-45119High (8.8)0.67%—Dec 21, 2023
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'n' parameter of the /update.php?q=quiz resource does not validate the characters received and they are sent…
CVE-2023-45118High (8.8)0.67%—Dec 21, 2023
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'fdid' parameter of the /update.php resource does not validate the characters received and they are sent…
CVE-2023-45117High (8.8)0.51%—Dec 21, 2023
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'eid' parameter of the /update.php?q=rmquiz resource does not validate the characters received and they are sent…
CVE-2023-45116High (8.8)0.67%—Dec 21, 2023
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'demail' parameter of the /update.php resource does not validate the characters received and they are sent…
CVE-2023-45115High (8.8)0.67%—Dec 21, 2023
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'ch' parameter of the /update.php?q=addqns resource does not validate the characters received and they are sent…
CVE-2023-45203Medium (6.1)0.41%—Nov 1, 2023
Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the login.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted…
CVE-2023-45202Medium (6.1)0.41%—Nov 1, 2023
Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted…
CVE-2023-45201Medium (6.1)0.39%—Nov 1, 2023
Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted…
CVE-2022-42066Medium (6.1)0.61%—Oct 14, 2022
Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php.
CVE-2021-46307Critical (9.8)1.6%—Jan 21, 2022
An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php.

Other products by Projectworlds