What are the loopholes in Exam Star?

The security vulnerabilities of Exam Star are as follows:

1. XSS attack: This is a very common cross-site scripting attack that can steal user data;

< p>2. SQL injection attack: This is a particularly dangerous attack that can steal information in the database;

3. CSRF attack: This attack can cause the user's operations to be unauthorized Third-party control;

4. Unencrypted data transmission: If data transmission is not encrypted, it may be stolen;

5. Account information leakage: Insecure account management system It may lead to the leakage of user information.

5. Data is stored in a third party, which poses security risks;

6. It is expensive. If the examination service platform updates the system, it needs to update the privatized deployment system at the same time.

Introduction to Exam Star:

Exam Star is affiliated to Beijing Mengjianxing Technology Co., Ltd. and was founded in 2014. It provides online exams for medium and large enterprises based on SaaS, AI, and talent data. Technology company providing training solutions. Exam Star helps enterprises build a stable and efficient full-process online examination system to meet various examination training scenarios such as serious examinations, training examinations, competition activities, and recruitment examinations.

In the eight years since its establishment, Exam Star has released one million exams and more than 500,000 courses with more than 400,000 companies, empowering unlimited value in the field of talent selection and allocation.

The operation of Exam Star is as follows:

Create an exam:

1. Go to the home page of Exam Star management terminal and click the "Create Exam" shortcut to enter directly Create an exam page;

2. There are two ways to create an exam, one is to create a new exam paper and use it to create an exam, the other is to select an exam from the exam paper library test paper to create an exam. Here we take the first method of creating a new test paper as an example. Complete the name of the test paper, the classification of the test paper, and select the method of composing the paper. Here we take the selection of questions as an example. Select the answer time and click Next;

3. Enter the second step of creating an exam. Click "Select a question from the question bank" to select the type of question you want to add and select the question you want to add from the question bank.

4. After adding the test questions, you need to set the test score. After all the test questions are added, you can click to preview or download. After confirming that everything is correct, you can click Next to enter the test publishing page.

5. Enter the exam release page, where you can edit the exam name, exam category, student login method, exam time, answer sheet duration, number of answers, passing scores, participating students, and exam description.

You can also click the "Edit Test Paper" button under the test paper information to edit and modify the test paper again. Click the "Expand more settings" button below to make more customized exam settings.

6. After clicking to expand more settings, you can set more customized functions, which can be turned on or off as needed. After editing is complete, click Publish Exam.