<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: online examination system</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-2173: A vulnerability was identified in code-projects Online Examination System 1.0</title><link>https://patchthecve.com/cve/CVE-2026-2173.html</link><guid>https://patchthecve.com/cve/CVE-2026-2173.html</guid><pubDate>Wed, 17 Jun 2026 10:30:28 +0000</pubDate><description>HIGH 7.3: A vulnerability was identified in code-projects Online Examination System 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely.</description></item><item><title>CVE-2026-1423: A vulnerability was determined in code-projects Online Examination System 1.0</title><link>https://patchthecve.com/cve/CVE-2026-1423.html</link><guid>https://patchthecve.com/cve/CVE-2026-1423.html</guid><pubDate>Wed, 17 Jun 2026 10:15:45 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was determined in code-projects Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /admin_pic.php. Executing a manipulation can lead to unrestricted upload. The attack may be performed from remote. The exploit has been publicly disclosed a</description></item><item><title>CVE-2026-1422: A vulnerability was found in code-projects Online Examination System 1.0</title><link>https://patchthecve.com/cve/CVE-2026-1422.html</link><guid>https://patchthecve.com/cve/CVE-2026-1422.html</guid><pubDate>Wed, 17 Jun 2026 10:15:45 +0000</pubDate><description>HIGH 7.3: A vulnerability was found in code-projects Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Page. Performing a manipulation of the argument User results in sql injection. The attack is possible to be carried out r</description></item><item><title>CVE-2026-1421: A vulnerability has been found in code-projects Online Examination System 1.0</title><link>https://patchthecve.com/cve/CVE-2026-1421.html</link><guid>https://patchthecve.com/cve/CVE-2026-1421.html</guid><pubDate>Wed, 17 Jun 2026 10:15:45 +0000</pubDate><description>LOW 3.5: A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unknown function of the component Add Pages. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.</description></item><item><title>CVE-2025-11736: A flaw has been found in itsourcecode Online Examination System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-11736.html</link><guid>https://patchthecve.com/cve/CVE-2025-11736.html</guid><pubDate>Thu, 08 Oct 2026 12:10:00 +0000</pubDate><description>HIGH 7.3: A flaw has been found in itsourcecode Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be</description></item><item><title>CVE-2025-4706: A vulnerability was found in projectworlds Online Examination System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-4706.html</link><guid>https://patchthecve.com/cve/CVE-2025-4706.html</guid><pubDate>Wed, 17 Jun 2026 09:33:49 +0000</pubDate><description>HIGH 7.3: A vulnerability was found in projectworlds Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Procedure3b_yearwiseVisit.php. The manipulation of the argument Visit_year leads to sql injection. The attack can be initiated remotely. Th</description></item><item><title>CVE-2025-4058: A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-4058.html</link><guid>https://patchthecve.com/cve/CVE-2025-4058.html</guid><pubDate>Wed, 17 Jun 2026 09:32:24 +0000</pubDate><description>HIGH 7.3: A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0. This affects an unknown part of the file /Bloodgroop_process.php. The manipulation of the argument Pat_BloodGroup1 leads to sql injection. It is possible to initiate the attack remotely. The exploit</description></item><item><title>CVE-2025-4034: A vulnerability classified as critical was found in projectworlds Online Examination System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-4034.html</link><guid>https://patchthecve.com/cve/CVE-2025-4034.html</guid><pubDate>Wed, 17 Jun 2026 09:32:21 +0000</pubDate><description>HIGH 7.3: A vulnerability classified as critical was found in projectworlds Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /inser_doc_process.php. The manipulation of the argument Doc_ID leads to sql injection. The attack can be launched remotely. The exp</description></item><item><title>CVE-2024-42843: Projectworlds Online Examination System v1.0 is vulnerable to SQL Injection via the subject parameter in feed.</title><link>https://patchthecve.com/cve/CVE-2024-42843.html</link><guid>https://patchthecve.com/cve/CVE-2024-42843.html</guid><pubDate>Wed, 17 Jun 2026 07:50:04 +0000</pubDate><description>CRITICAL 9.8: Projectworlds Online Examination System v1.0 is vulnerable to SQL Injection via the subject parameter in feed.php.</description></item><item><title>CVE-2024-5116: A vulnerability, which was classified as critical, has been found in SourceCodester Online Examination System </title><link>https://patchthecve.com/cve/CVE-2024-5116.html</link><guid>https://patchthecve.com/cve/CVE-2024-5116.html</guid><pubDate>Wed, 17 Jun 2026 08:15:13 +0000</pubDate><description>HIGH 7.3: A vulnerability, which was classified as critical, has been found in SourceCodester Online Examination System 1.0. Affected by this issue is some unknown functionality of the file save.php. The manipulation of the argument vote leads to sql injection. The attack may be launched remotely. The exploit</description></item><item><title>CVE-2024-5046: A vulnerability was found in SourceCodester Online Examination System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-5046.html</link><guid>https://patchthecve.com/cve/CVE-2024-5046.html</guid><pubDate>Wed, 17 Jun 2026 08:14:58 +0000</pubDate><description>HIGH 7.3: A vulnerability was found in SourceCodester Online Examination System 1.0. It has been rated as critical. This issue affects some unknown processing of the file registeracc.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been </description></item><item><title>CVE-2024-4919: A vulnerability was found in Campcodes Online Examination System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-4919.html</link><guid>https://patchthecve.com/cve/CVE-2024-4919.html</guid><pubDate>Wed, 17 Jun 2026 08:03:11 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Campcodes Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /adminpanel/admin/query/addCourseExe.php. The manipulation of the argument course_name leads to sql injection. The attack can be initiated remot</description></item><item><title>CVE-2024-2945: A vulnerability was found in Campcodes Online Examination System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-2945.html</link><guid>https://patchthecve.com/cve/CVE-2024-2945.html</guid><pubDate>Wed, 17 Jun 2026 07:25:53 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Campcodes Online Examination System 1.0. It has been classified as critical. Affected is an unknown function of the file /adminpanel/admin/facebox_modal/updateExaminee.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack re</description></item><item><title>CVE-2024-2944: A vulnerability was found in Campcodes Online Examination System 1.0 and classified as critical</title><link>https://patchthecve.com/cve/CVE-2024-2944.html</link><guid>https://patchthecve.com/cve/CVE-2024-2944.html</guid><pubDate>Wed, 17 Jun 2026 07:25:52 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Campcodes Online Examination System 1.0 and classified as critical. This issue affects some unknown processing of the file /adminpanel/admin/query/deleteCourseExe.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The e</description></item><item><title>CVE-2024-2943: A vulnerability has been found in Campcodes Online Examination System 1.0 and classified as critical</title><link>https://patchthecve.com/cve/CVE-2024-2943.html</link><guid>https://patchthecve.com/cve/CVE-2024-2943.html</guid><pubDate>Wed, 17 Jun 2026 07:25:52 +0000</pubDate><description>MEDIUM 6.3: A vulnerability has been found in Campcodes Online Examination System 1.0 and classified as critical. This vulnerability affects unknown code of the file /adminpanel/admin/query/deleteExamExe.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The e</description></item><item><title>CVE-2024-2942: A vulnerability, which was classified as critical, was found in Campcodes Online Examination System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-2942.html</link><guid>https://patchthecve.com/cve/CVE-2024-2942.html</guid><pubDate>Wed, 17 Jun 2026 07:25:52 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, was found in Campcodes Online Examination System 1.0. This affects an unknown part of the file /adminpanel/admin/query/deleteQuestionExe.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely.</description></item><item><title>CVE-2024-2941: A vulnerability, which was classified as critical, has been found in Campcodes Online Examination System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-2941.html</link><guid>https://patchthecve.com/cve/CVE-2024-2941.html</guid><pubDate>Wed, 17 Jun 2026 07:25:52 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in Campcodes Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /adminpanel/admin/query/loginExe.php. The manipulation of the argument pass leads to sql injection. The attack may be launche</description></item><item><title>CVE-2024-2940: A vulnerability classified as problematic was found in Campcodes Online Examination System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-2940.html</link><guid>https://patchthecve.com/cve/CVE-2024-2940.html</guid><pubDate>Wed, 17 Jun 2026 07:25:52 +0000</pubDate><description>LOW 3.5: A vulnerability classified as problematic was found in Campcodes Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /adminpanel/admin/facebox_modal/updateCourse.php. The manipulation of the argument id leads to cross site scripting. The attack can b</description></item><item><title>CVE-2024-2939: A vulnerability classified as problematic has been found in Campcodes Online Examination System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-2939.html</link><guid>https://patchthecve.com/cve/CVE-2024-2939.html</guid><pubDate>Wed, 17 Jun 2026 07:25:52 +0000</pubDate><description>LOW 3.5: A vulnerability classified as problematic has been found in Campcodes Online Examination System 1.0. Affected is an unknown function of the file /adminpanel/admin/facebox_modal/updateExaminee.php. The manipulation of the argument id leads to cross site scripting. It is possible to launch the attack </description></item><item><title>CVE-2024-2938: A vulnerability was found in Campcodes Online Examination System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-2938.html</link><guid>https://patchthecve.com/cve/CVE-2024-2938.html</guid><pubDate>Wed, 17 Jun 2026 07:25:52 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Campcodes Online Examination System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /adminpanel/admin/facebox_modal/updateCourse.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remote</description></item></channel></rss>