CVE-2013-7175

The CVE refers to Avanset Visual CertExam Manager (version 3.3 and below) with a SQL injection vulnerability in the input fields Title, File name, and Candidate Name. The root cause is improper handling/validation of user-supplied data in these fields, allowing an authenticated remote attacker to...