GCVE - cpe:2.3:a:sourcecodester:online_exam_system:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:online_exam_system:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Sourcecodester (`f6c988b2-f9bb-51b9-8f02-f23eef2a7551`)
Product	Online Exam System (`a37d4d13-caf0-5646-92b5-85e969568ee3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-10353`	vulnerable	2026-06-08 06:22:04.045843	SourceCodester Online Exam System admin-dashboard access control MEDIUM (6.3) A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /admin-dashboard. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This affects a different product and is a different issue than CVE-2024-40480. Published: 2024-10-24T23:31:14.842Z Updated: 2024-10-25T18:07:29.067Z Open on db.gcve.eu Reference links https://vuldb.com/?id.281700 https://vuldb.com/?ctiid.281700 https://vuldb.com/?submit.427957 https://drive.google.com/file/d/1hEXfbOOkWdYzaSI6ORQvPGBtn09R12Ui/view?usp=drive_link https://www.sourcecodester.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2771`	vulnerable	2026-06-08 06:02:42.976991	SourceCodester Online Exam System data sql injection MEDIUM (6.3) A vulnerability, which was classified as critical, has been found in SourceCodester Online Exam System 1.0. This issue affects some unknown processing of the file /jurusanmatkul/data. The manipulation of the argument columns[1][data] leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-229277 was assigned to this vulnerability. Published: 2023-05-17T18:31:03.622Z Updated: 2024-08-02T06:33:05.598Z Open on db.gcve.eu Reference links https://vuldb.com/?id.229277 https://vuldb.com/?ctiid.229277 https://github.com/tht1997/CVE_2023/blob/main/online_exam/kelasdosen.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2770`	vulnerable	2026-06-08 06:02:42.976518	SourceCodester Online Exam System data sql injection MEDIUM (6.3) A vulnerability classified as critical was found in SourceCodester Online Exam System 1.0. This vulnerability affects unknown code of the file /kelasdosen/data. The manipulation of the argument columns[1][data] leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229276. Published: 2023-05-17T18:00:04.299Z Updated: 2024-08-02T06:33:05.599Z Open on db.gcve.eu Reference links https://vuldb.com/?id.229276 https://vuldb.com/?ctiid.229276 https://github.com/tht1997/CVE_2023/blob/main/online_exam/kelasdosen.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2697`	vulnerable	2026-06-08 06:02:42.848932	SourceCodester Online Exam System POST Parameter data sql injection MEDIUM (6.3) A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /jurusan/data of the component POST Parameter Handler. The manipulation of the argument columns[1][data] leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-228978 is the identifier assigned to this vulnerability. Published: 2023-05-14T11:31:03.337Z Updated: 2024-08-02T06:33:05.495Z Open on db.gcve.eu Reference links https://vuldb.com/?id.228978 https://vuldb.com/?ctiid.228978 https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/img/jurusan_data.png	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2696`	vulnerable	2026-06-08 06:02:42.848391	SourceCodester Online Exam System POST Parameter data sql injection MEDIUM (6.3) A vulnerability was found in SourceCodester Online Exam System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /matkul/data of the component POST Parameter Handler. The manipulation of the argument columns[1][data] leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228977 was assigned to this vulnerability. Published: 2023-05-14T11:00:04.623Z Updated: 2024-08-02T06:33:04.392Z Open on db.gcve.eu Reference links https://vuldb.com/?id.228977 https://vuldb.com/?ctiid.228977 https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/img/matkul_data.png	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2695`	vulnerable	2026-06-08 06:02:42.847880	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2694`	vulnerable	2026-06-08 06:02:42.847427	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2693`	vulnerable	2026-06-08 06:02:42.846727	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2642`	vulnerable	2026-06-08 06:02:42.691813	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.