CVE-2023-45120

Online Examination System v1.0 is affected by multiple authenticated SQL injection flaws in the /update.php?q=quiz&step=2 path where the qid parameter is not validated and its content is sent unfiltered to the database. Root cause: lack of input validation enabling harmful SQL constructs. Impact:...