github.com
https://github.com/projectworldsofficial/online-examination-systen-in-php CVE-2020-29205
MEDIUM
Online Examination System 1.0 - 'name' Stored Cross Site Scripting
Record summary
CVE-2020-29205 has a selected CVSS score of 6.1 (medium); EIP currently links 1 catalogued exploit.
Description
XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBOnline Examination System 1.0 - 'name' Stored Cross Site ScriptingExploitDB exploitby Nikhil KumarNot analyzed1 file
References
4nikhilkumar01.medium.com
https://nikhilkumar01.medium.com/cve-2020-29205-a7ab5cbcd156 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-29205 exploit-db.com
https://www.exploit-db.com/exploits/48969