PT-2026-28760 · Code Projects · Exam Form Submission

Hajimi · Published 2026-03-30 · Updated 2026-03-30 · CVE-2026-5106

NVD

CVSS v2.0

3.3

Low

AV:N/AC:L/Au:M/C:N/I:P/A:N

A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/update fst.php. Executing a manipulation of the argument sname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-5106

Affected Products

Exam Form Submission

References · 6

• 🔥 https://github.com/sxc2044-pixel/hajimi/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5106 · Security Note
• https://code-projects.org · Note
• https://vuldb.com/vuln/354131 · Note
• https://vuldb.com/submit/780091 · Note
• https://vuldb.com/vuln/354131/cti · Note