GCVE - cpe:2.3:a:jayesh:online_exam_system:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jayesh:online_exam_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Jayesh (`1a19673a-98f8-59eb-ab27-3d4376a5bf2f`)
Product	Online Exam System (`8a107098-bd98-51e9-9449-220fc83d4e22`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-51567`	vulnerable	2026-06-08 07:31:11.245834	Details available A SQL Injection was found in the /exam/user/profile.php page of kashipara Online Exam System V1.0, which allows remote attackers to execute arbitrary SQL command to get unauthorized database access via the rname, rcollage, rnumber, rgender and rpassword parameters in a POST HTTP request. Published: 2026-01-12T00:00:00.000Z Updated: 2026-01-12T20:06:58.653Z Open on db.gcve.eu Reference links https://github.com/0xBhushan/Writeups/blob/main/CVE/Kashipara/Online%20Exam%20System/SQL%20Injection-Profile%20Update.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-40480`	vulnerable	2026-06-08 06:43:52.275468	Details available A Broken Access Control vulnerability was found in /admin/update.php and /admin/dashboard.php in Kashipara Online Exam System v1.0, which allows remote unauthenticated attackers to view administrator dashboard and delete valid user accounts via the direct URL access. Published: 2024-08-09T00:00:00.000Z Updated: 2025-03-14T15:12:51.249Z Open on db.gcve.eu Reference links https://www.kashipara.com/project/php/3/online-exam-php-project-source-code-download https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Online%20Exam%20System%20v1.0/Broken%20Access%20Control%20-%20Admin%20Dashboard%20and%20User%20Deletion.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-40479`	vulnerable	2026-06-08 06:43:52.274814	Details available A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL commands via the "eid" parameter. Published: 2024-08-09T00:00:00.000Z Updated: 2024-08-09T18:29:37.891Z Open on db.gcve.eu Reference links https://www.kashipara.com/project/php/3/online-exam-php-project-source-code-download https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Online%20Exam%20System%20v1.0/SQL%20Injection.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-40478`	vulnerable	2026-06-08 06:43:52.273190	Details available A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/afeedback.php" in Kashipara Online Exam System v1.0, which allows remote attackers to execute arbitrary code via "rname" and "email" parameter fields Published: 2024-08-09T00:00:00.000Z Updated: 2025-03-13T15:37:59.767Z Open on db.gcve.eu Reference links https://www.kashipara.com/project/php/3/online-exam-php-project-source-code-download https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Online%20Exam%20System%20v1.0/Stored%20XSS.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.