CVE-2023-45115: Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'ch' parameter of the /update.php?q=addqns resource does not validate the characters received and they are sent unfiltered to the database.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-45115?
CVE-2023-45115 is categorized as a high severity vulnerability due to the presence of multiple authenticated SQL injection vulnerabilities.
How do I fix CVE-2023-45115?
To fix CVE-2023-45115, validate and sanitize user input before sending it to the database in Online Examination System version 1.0.
What are the impacts of CVE-2023-45115?
CVE-2023-45115 can allow attackers to manipulate database queries, potentially leading to unauthorized data access or data leakage.
Is CVE-2023-45115 exploitable remotely?
Yes, CVE-2023-45115 can be exploited remotely if an attacker has access to the vulnerable endpoint.
Who is affected by CVE-2023-45115?
Users of Online Examination System version 1.0 are directly affected by CVE-2023-45115 due to the identified SQL injection vulnerabilities.