CVE-2021-47902 Testa Online Test Management System 3.4.7 - 'q' SQL Injection

Testa Online Test Management System 3.4.7 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'q' search parameter. Attackers can inject malicious SQL code in the search field to extract database information, potentially accessing sensitive user...

CVE-2021-47902 Testa Online Test Management System 3.4.7 - 'q' SQL Injection

Testa Online Test Management System 3.4.7 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'q' search parameter. Attackers can inject malicious SQL code in the search field to extract database information, potentially accessing sensitive user...

CVE-2021-47902

CVE-2021-47902 affects Testa Online Test Management System 3.4.7. A SQL injection vulnerability exists via the 'q' search parameter, enabling attackers to manipulate database queries and potentially access sensitive user or system data. The provided documents do not specify a remediation or patch...

CVE-2021-47902: Improper Neutralization of Special Elements used in an SQL Command

Testa Online Test Management System 3.4.7 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'q' search parameter. Attackers can inject malicious SQL code in the search field to extract database information, potentially accessing sensitive user...

Testa Online Test Management System SQL Injection Vulnerability

Testa Online Test Management System is an online examination software developed by the Malta-based company Testa. Version 3.4.7 of the Testa Online Test Management System has a SQL injection vulnerability. This vulnerability stems from incorrect handling of the search parameter “q”, and it may le...

Testa Online Test Management System 3.4.7 - 'q' SQL Injection

Exploit Title: Testa Online Test Management System 3.4.7 - 'q' SQL Injection Date: 2020-07-21 Google Dork: N/A Exploit Author: Ultra Security Team Team Members: Ashkan Moghaddas , AmirMohammad Safari , Behzad Khalifeh , Milad Ranjbar Vendor Homepage: https://testa.cc Version: v3.4.7 Tested on:...

Testa Online Test Management System 3.4.7 SQL Injection

Exploit Title: Testa Online Test Management System 3.4.7 - 'q' SQL Injection Date: 2020-07-21 Google Dork: N/A Exploit Author: Ultra Security Team Team Members: Ashkan Moghaddas , AmirMohammad Safari , Behzad Khalifeh , Milad Ranjbar Vendor Homepage: https://testa.cc Version: v3.4.7 Tested on:...

CVE-2013-6873: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Testa Online Test Management System OTMS 2.0.0.2 allows remote attackers to execute arbitrary SQL commands via the testid parameter...

PT-2013-6162

Name of the Vulnerable Software and Affected Versions Testa Online Test Management System OTMS version 2.0.0.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the test id parameter. Recommendations For version 2.0.0.2, avoid using the test id...