Yf-exam Project Yf-exam (Yunfan Examination System) 1.8.0
Approved changes feed: RSS · Atom
cpe:2.3:a:yf-exam_project:yf-exam:1.8.0:*:*:*:*:*:*:*part: a version: 1.8.0 update: *
| Vendor | Yf Exam Project (2a0da151-e8d9-57c0-86cf-74c2af511850) |
|---|---|
| Product | Yf Exam (5f2d595a-4065-5f66-acee-de525756d8c8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/cleverstupiddog/yf-exam |
purl2cpe | 2026-06-01 10:16:59.225820 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-26780 |
vulnerable | 2026-06-08 05:57:40.339231 |
Details available
CleverStupidDog yf-exam v 1.8.0 is vulnerable to SQL Injection.
Published: 2023-03-02T00:00:00.000Z
Updated: 2025-03-07T17:22:47.152Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26779 |
vulnerable | 2026-06-08 05:57:40.338766 |
Details available
CleverStupidDog yf-exam v 1.8.0 is vulnerable to Deserialization which can lead to remote code execution (RCE).
Published: 2023-03-03T00:00:00.000Z
Updated: 2025-03-06T20:36:39.671Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25403 |
vulnerable | 2026-06-08 05:56:08.775511 |
Details available
CleverStupidDog yf-exam v 1.8.0 is vulnerable to Authentication Bypass. The program uses a fixed JWT key, and the stored key uses username format characters. Any user who logged in within 24 hours. A token can be forged with his username to bypass authentication.
Published: 2023-03-03T00:00:00.000Z
Updated: 2025-03-07T16:39:28.313Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25402 |
vulnerable | 2026-06-08 05:56:08.775087 |
Details available
CleverStupidDog yf-exam 1.8.0 is vulnerable to File Upload. There is no restriction on the suffix of the uploaded file, resulting in any file upload.
Published: 2023-03-03T00:00:00.000Z
Updated: 2025-03-06T20:43:39.111Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.