Filtered by vendor Nayem-howlader Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-37057 2 Nayem-howlader, Sunnygkp10 2 Online Exam System, Online-exam-system 2026-03-05 8.2 High
Online-Exam-System 2015 contains a SQL injection vulnerability in the feedback module that allows attackers to manipulate database queries through the 'fid' parameter. Attackers can inject malicious SQL code into the 'fid' parameter to potentially extract, modify, or delete database information.
CVE-2020-37051 2 Nayem-howlader, Sunnygkp10 2 Online Exam System, Online-exam-system 2026-03-05 8.2 High
Online-Exam-System 2015 contains a time-based blind SQL injection vulnerability in the feedback form that allows attackers to extract database password hashes. Attackers can exploit the 'feed.php' endpoint by crafting malicious payload requests that use time delays to systematically enumerate user password characters.
CVE-2023-48124 1 Nayem-howlader 1 Sup Online Shopping 2026-02-10 5.4 Medium
Cross Site Scripting in SUP Online Shopping v.1.0 allows a remote attacker to execute arbitrary code via the Name, Email and Address parameters in the Register New Account component.
CVE-2025-28087 1 Nayem-howlader 1 Online Exam System 2025-04-07 9.8 Critical
Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php.