Published: 05/11/2021 Updated: 17/11/2021

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Subscribe to Engineers Online Portal Project

A Stored Cross Site Scripting (XSS) Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the (1) Quiz title and (2) quiz description parameters to add_quiz.php. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to cookie stealing and more.

Vulnerable Product	Search on Vulmon	Subscribe to Product
engineers online portal project engineers online portal 1.0

Engineers Online Portal version 10 suffers from a persistent cross site scripting vulnerability ...

CVE-2021-42664 - Stored Cross-Site Scripting vulnerability in the Engineers online portal system.

CVE-2021-42664 CVE-2021-42664 - Stored Cross-Site Scripting vulnerability in the Engineers online portal system Technical description: A stored XSS vulnerability exists in the Engineers online portal system An attacker can leverage this vulnerability in order to run javascript on the web server surfers behalf, which can lead to cookie stealing, defacement and more Affected c

CVE-2021-42664 - Stored Cross-Site Scripting vulnerability in the Engineers online portal system.

CVE-2021-42664 CVE-2021-42664 - Stored Cross-Site Scripting vulnerability in the Engineers online portal system Technical description: A stored XSS vulnerability exists in the Engineers online portal system An attacker can leverage this vulnerability in order to run javascript on the web server surfers behalf, which can lead to cookie stealing, defacement and more Affected c

CWE-79 https://github.com/TheHackingRabbi/CVE-2021-42664 https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html https://www.exploit-db.com/exploits/50451 http://packetstormsecurity.com/files/164618/Engineers-Online-Portal-1.0-SQL-Injection.html https://nvd.nist.gov https://github.com/0xDeku/CVE-2021-42664 https://packetstormsecurity.com/files/164617/Engineers-Online-Portal-1.0-Cross-Site-Scripting.html

CVE-2021-42664

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect