PT-2026-27052 · Code Projects · Exam Form Submission

Yao23333 · Publicado 2026-03-23 · Atualizado 2026-03-24 · CVE-2026-4575

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions code-projects Exam Form Submission version 1.0

Description A flaw exists in code-projects Exam Form Submission 1.0, involving the processing of the file '/admin/update s2.php'. Manipulation of the sname argument can lead to cross site scripting. This issue can be exploited remotely. The exploit has been published.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Enumeração de Fraquezas

CWE-79

CWE-94

Identificadores relacionados

CVE-2026-4575

Produtos afetados

Exam Form Submission

Referências · 8

• 🔥 https://github.com/yao536/cve/issues/1 · Exploit
• https://twitter.com/CVEnew/status/2035992469922287947 · Publicação no Twitter
• https://twitter.com/CVEarity/status/2036441885624115486 · Publicação no Twitter
• https://vuldb.com/?ctiid.352412 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-4575 · Nota de Segurança
• https://code-projects.org · Nota
• https://vuldb.com/?submit.775202 · Nota
• https://vuldb.com/?id.352412 · Nota