CVE-2026-1422: code-projects Online Examination System Login Page index.php sql injection
A vulnerability was found in code-projects Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Page. Performing a manipulation of the argument User results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1422?
CVE-2026-1422 has a high severity due to its ability to allow SQL injection through the login page.
How do I fix CVE-2026-1422?
You can fix CVE-2026-1422 by implementing parameterized queries in the /index.php file to prevent SQL injection.
What versions of the Online Examination System are affected by CVE-2026-1422?
CVE-2026-1422 affects version 1.0 of the code-projects Online Examination System.
What component is vulnerable in CVE-2026-1422?
The vulnerable component in CVE-2026-1422 is the Login Page functionality found in /index.php.
Can CVE-2026-1422 lead to unauthorized access?
Yes, CVE-2026-1422 can potentially lead to unauthorized access by exploiting the SQL injection vulnerability.