CVE-2023-45114: Online Examination System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Published Nov 2, 2023
·Updated
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected Software
1 affected component
Online Examination System Project Online Examination System=1.0
Event History
Nov 2, 2023
CVE Published
01:46 AM
Rejected
01:46 AM
Data Sourced
via NVD·02:15 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for Online Examination System v1.0?
The vulnerability ID for Online Examination System v1.0 is CVE-2023-45114.
2
What is the severity of CVE-2023-45114?
The severity of CVE-2023-45114 is critical with a CVSS score of 9.8.
3
How does the SQL injection vulnerability in Online Examination System v1.0 work?
The SQL injection occurs in the 'subject' parameter of the feed.php resource, allowing unauthenticated users to send unfiltered characters to the database.
4
What software is affected by CVE-2023-45114?
Online Examination System v1.0 is affected by CVE-2023-45114.
5
How can I fix the SQL injection vulnerability in Online Examination System v1.0?
To fix the SQL injection vulnerability, ensure that the 'subject' parameter of the feed.php resource is properly validated and filters out untrusted characters.