CVE-2024-12890

CVE-2024-12890 affects code-projects Online Exam Mastering System 1.0. A vulnerability in the endpoint /update.php?q=quiz&step=2 allows SQL injection via the eid parameter, enabling remote exploitation. Public exploitation is indicated by the sources. The available documents do not specify a vend...

CVE-2024-12891

CVE-2024-12891 affects code-projects Online Exam Mastering System 1.0. Affected is an SQL injection in the function/file path /account.php?q=quiz&step=2, exploitable via manipulating the parameter eid . The issue enables remote exploitation and has been disclosed publicly. Root cause: unsafely ha...