PT-2026-27032 · Code Projects · Exam Form Submission

Sgwt · Publicado 2026-03-22 · Atualizado 2026-03-23 · CVE-2026-4557

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions code-projects Exam Form Submission version 1.0

Description A cross-site scripting issue exists in code-projects Exam Form Submission version 1.0. The issue is located in the file /admin/update s1.php. Manipulation of the sname argument can trigger the issue. The attack can be initiated remotely. The exploit is publicly available.

Recommendations Apply any available updates to address the issue in the /admin/update s1.php file. As a temporary workaround, sanitize the sname argument to prevent cross-site scripting. Restrict access to the /admin/update s1.php file to authorized personnel only.

Exploit

Correção

XSS

Code Injection

Enumeração de Fraquezas

CWE-79

CWE-94

Identificadores relacionados

CVE-2026-4557

Produtos afetados

Exam Form Submission

Referências · 8

• 🔥 https://github.com/dsdsadawada/CVE1/issues/3 · Exploit
• https://twitter.com/cyberbivash/status/2035805150040719577 · Publicação no Twitter
• https://code-projects.org · Nota
• https://twitter.com/CVEnew/status/2035992496023466120 · Publicação no Twitter
• https://vuldb.com/?ctiid.352384 · Nota
• https://vuldb.com/?id.352384 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-4557 · Nota de Segurança
• https://vuldb.com/?submit.774947 · Nota