First published: Thu Sep 19 2024(Updated: )
A vulnerability, which was classified as critical, has been found in code-projects Online Quiz Site 1.0. This issue affects some unknown processing of the file showtest.php. The manipulation of the argument subid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Fabianros Online Quiz Site | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-9009 is classified as a critical vulnerability.
To remediate CVE-2024-9009, it is essential to sanitize and validate the input for the 'subid' parameter in showtest.php to prevent SQL injection.
CVE-2024-9009 is an SQL injection vulnerability.
Yes, CVE-2024-9009 can be exploited remotely by manipulating the 'subid' parameter.
CVE-2024-9009 affects version 1.0 of the Online Quiz Site by Fabianros.