CVE-2024-12891: code-projects Online Exam Mastering System account.php sql injection
First published: Sun Dec 22 2024(Updated: )
A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Affected is an unknown function of the file /account.php?q=quiz&step=2. The manipulation of the argument eid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Online Exam Mastering System | ||
| Online Exam Mastering System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-12891?
CVE-2024-12891 is classified as a critical vulnerability.
How does CVE-2024-12891 affect the Online Exam Mastering System?
CVE-2024-12891 allows for SQL injection through a manipulation of the argument eid in the file /account.php?q=quiz&step=2.
Can CVE-2024-12891 be exploited remotely?
Yes, CVE-2024-12891 can be exploited remotely.
Is any specific version of the Online Exam Mastering System affected by CVE-2024-12891?
CVE-2024-12891 affects the code-projects Online Exam Mastering System 1.0.
How can I fix CVE-2024-12891?
To fix CVE-2024-12891, ensure input validation and parameterized queries are implemented in the code to prevent SQL injection.
- agent/weakness
- agent/title
- agent/description
- agent/first-publish-date
- agent/references
- agent/type
- agent/author
- agent/trending
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- vendor/code-projects
- canonical/online exam mastering system
- version/online exam mastering system/1.0