PatchTheCVEonline exam system vulnerabilities and fixes
Recent CVEs affecting online exam system, with upgrade or downgrade steps. 6 tracked.
Also searched as: onlineexamsystem.
online exam system has 6 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-01-12. Highest priority: CVE-2025-28087 (score 55/100).
- CVE-2025-51567 CRITICAL 9.1 DOWNGRADE A SQL Injection was found in the /exam/user/profile.php page of kashipara Online Exam System V1.0, which allow
- CVE-2025-28087 CRITICAL 9.8 DOWNGRADE Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php.
- CVE-2024-40480 CRITICAL 9.8 DOWNGRADE A Broken Access Control vulnerability was found in /admin/update.php and /admin/dashboard.php in Kashipara Onl
- CVE-2024-40479 HIGH 8.1 DOWNGRADE A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote
- CVE-2024-40478 MEDIUM 5.4 DOWNGRADE A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/afeedback.php" in Kashipara Online Exam
- CVE-2024-10353 MEDIUM 6.3 DOWNGRADE A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0
FAQ
How do I fix online exam system vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is online exam system being exploited right now?
None of the tracked online exam system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which online exam system CVE should I patch first?
CVE-2025-28087 currently ranks highest (55/100): Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php..