CVE-2023-45121: Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'desc' parameter of the /update.php?q=addquiz resource does not validate the characters received and they are sent unfiltered to the database.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-45121?
CVE-2023-45121 is classified as a critical severity vulnerability due to its potential for exploitation via SQL Injection.
How do I fix CVE-2023-45121?
To fix CVE-2023-45121, you must implement proper input validation and sanitization on the 'desc' parameter in the /update.php?q=addquiz resource.
Who is affected by CVE-2023-45121?
CVE-2023-45121 affects users of Online Examination System version 1.0.
What types of attacks can exploit CVE-2023-45121?
CVE-2023-45121 can be exploited through authenticated SQL Injection attacks, allowing attackers to manipulate database queries.
Is CVE-2023-45121 a known issue in other software versions?
CVE-2023-45121 is specifically associated with Online Examination System version 1.0 and may not be applicable to other versions or software.