Description (CNA)
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'n' parameter of the /update.php?q=quiz resource does not validate the characters received and they are sent unfiltered to the database.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Projectworlds Pvt. Limited / Online Examination System | affected 1.0 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.