First published: Thu Nov 02 2023(Updated: )
Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database.
Credit: help@fluidattacks.com
Affected Software | Affected Version | How to fix |
---|---|---|
SourceCodester Online Examination System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2023-45111 is critical with a severity value of 9.8.
The affected software for CVE-2023-45111 is Online Examination System v1.0.
CVE-2023-45111 allows multiple unauthenticated SQL injection vulnerabilities in the Online Examination System v1.0.
To fix the SQL injection vulnerabilities in Online Examination System v1.0, the 'email' parameter of the feed.php resource should be validated and filtered before sending it to the database.
You can find more information about CVE-2023-45111 at the following references: [link1](https://fluidattacks.com/advisories/pires), [link2](https://projectworlds.in/).