Vulnerabilities > Projectworlds > Online Examination System

DATE CVE VULNERABILITY TITLE RISK
2022-10-14 CVE-2022-42066 Cross-site Scripting vulnerability in Projectworlds Online Examination System 1.0
Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php.
network
low complexity
projectworlds CWE-79
6.1
6.1
2022-01-21 CVE-2021-46307 SQL Injection vulnerability in Projectworlds Online Examination System 1.0
An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php.
network
low complexity
projectworlds CWE-89
critical
 10.0
10