2 matches found
Sql injection
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'n' parameter of the /update.php?q=quiz resource does not validate the characters received and they are sent unfiltered to the database...
6.5CVSS8.5AI score0.00673EPSS
SaveExploits1References2Affected Software1
CVE-2023-45119: Improper Neutralization of Special Elements used in an SQL Command
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'n' parameter of the /update.php?q=quiz resource does not validate the characters received and they are sent unfiltered to the database...
8.8CVSS7.8AI score0.00673EPSS
SaveExploits1References2
20