PT-2026-28672 · Code Projects · Exam Form Submission

Niuzzz · Publicado 2026-03-27 · Atualizado 2026-03-27 · CVE-2026-4909

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions code-projects Exam Form Submission version 1.0

Description A cross-site scripting issue exists due to the manipulation of the sname argument in the file '/admin/update s7.php'. The issue impacts an unknown function. The exploit has been publicly released and could be used for remote attacks.

Recommendations Apply updates to address the issue in version 1.0. As a temporary workaround, restrict access to the file /admin/update s7.php. Avoid using the sname parameter in the affected file /admin/update s7.php until the issue is resolved.

Exploit

Correção

XSS

Code Injection

Enumeração de Fraquezas

CWE-79

CWE-94

Identificadores relacionados

CVE-2026-4909

Produtos afetados

Exam Form Submission

Referências · 9

• 🔥 https://github.com/Niuzzz123/CVE-Niuzzz/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4909 · Nota de Segurança
• https://vuldb.com/?id.353660 · Nota
• https://twitter.com/CVEarity/status/2037513344182313186 · Publicação no Twitter
• https://vuldb.com/?submit.777502 · Nota
• https://twitter.com/cyberbivash/status/2037406361248514079 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2037513379233894712 · Publicação no Twitter
• https://vuldb.com/?ctiid.353660 · Nota
• https://code-projects.org · Nota