CVE-2023-45117

Опубликовано: 21 дек. 2023

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'eid' parameter of the /update.php?q=rmquiz resource does not validate the characters received and they are sent unfiltered to the database.

Ссылки

https://fluidattacks.com/advisories/argerich/
Issue Tracking
Third Party Advisory
https://projectworlds.in/
Product
https://fluidattacks.com/advisories/argerich/
Issue Tracking
Third Party Advisory
https://projectworlds.in/
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:projectworlds:online_examination_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 27%

0.00097

Низкий

8.8 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-qjw8-8m2x-jvh6

CVSS3: 9.8

github

около 2 лет назад

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'eid' parameter of the update.php resource does not validate the characters received and they are sent unfiltered to the database.