medium6.1
CVE-2020-29205
XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field
Impact
XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Projectworlds | Travel Management System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/projectworldsofficial/online-examination-systen-in-php
- https://nikhilkumar01.medium.com/cve-2020-29205-a7ab5cbcd156
- https://www.exploit-db.com/exploits/48969
- https://github.com/projectworldsofficial/online-examination-systen-in-php
- https://nikhilkumar01.medium.com/cve-2020-29205-a7ab5cbcd156
- https://www.exploit-db.com/exploits/48969