CVE-2023-45116: Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)

Published Dec 21, 2023

Updated

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'demail' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database.

Affected Software

1 affected component

Projectworlds Online Examination System=1.0

Event History

Dec 21, 2023

CVE Published

via MITRE·03:42 PM

Data Sourced

via MITRE·03:42 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-45116?

CVE-2023-45116 has a high severity due to its potential for exploitation through multiple authenticated SQL injection vulnerabilities.

How do I fix CVE-2023-45116?

To fix CVE-2023-45116, implement proper input validation and sanitization for the 'demail' parameter in the /update.php resource.

Which versions of Online Examination System are affected by CVE-2023-45116?

Online Examination System version 1.0 is affected by CVE-2023-45116.

What types of attacks can CVE-2023-45116 lead to?

CVE-2023-45116 can lead to unauthorized access to sensitive information and manipulation of the database due to SQL injection.

Is authentication required to exploit CVE-2023-45116?

Yes, the exploitation of CVE-2023-45116 requires authenticated access to the Online Examination System.