Examapp Vulnerabilities

[en] The examapp plugin 1.0 for WordPress has SQL injection via the wp-admin/admin.php?page=examapp_UserResult id parameter.

Affected:

up to 1.0

Fixed in:

1.0

Disclosed:

Sep 10, 2019

CVE-2017-18602 on NVD →

[en] The examapp plugin 1.0 for WordPress has XSS via exam input text fields.

Affected:

up to 1.0

Fixed in:

1.0

Disclosed:

Sep 10, 2019

CVE-2017-18601 on NVD →

Authenticated SQL Injection (SQLi) vulnerability found in WordPress IBPS Online Exam plugin <=1.0 versions. Blind SQL Injection possible when logged in as a student. 2017.07.29 - We were unable to find information about patched release of WordPress IBPS Online Exam plugin. Also, we were unable to locate the changelog f...

Affected:

up to 1.1

Fixed in:

1.1

Disclosed:

Jul 21, 2017

Authenticated Stored Cross-site scripting (XSS) vulnerability found in WordPress IBPS Online Exam plugin <=1.0 versions by 8bitsec. The attack is possible when logged in as a student. 2017.07.29 - We were unable to find information about patched release of WordPress IBPS Online Exam plugin. Also, we were unable to loca...

Affected:

up to 1.1

Fixed in:

1.1

Disclosed:

Jul 21, 2017

The examapp plugin 1.0 for WordPress has XSS via exam input text fields.

CVSS:

5.4

Affected:

up to 1.0

Fix:

No patched version reported

Disclosed:

Jul 20, 2017

CVE-2017-18601 on NVD →

The examapp plugin 1.0 for WordPress has SQL injection via the wp-admin/admin.php?page=examapp_UserResult id parameter.

CVSS:

8.8

Affected:

up to 1.0

Fix:

No patched version reported

Disclosed:

Jul 11, 2017

CVE-2017-18602 on NVD →