CVE-2026-14705: code-projects Online Examination head.php sql injection
A vulnerability was determined in code-projects Online Examination 1.0. Affected by this issue is some unknown functionality of the file head.php. Executing a manipulation of the argument uname/password can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14705?
The severity of CVE-2026-14705 is medium with a score of 5.5.
What is CVE-2026-14705?
CVE-2026-14705 is a SQL injection vulnerability found in the head.php file of the Code-projects Online Examination 1.0 application.
How does the SQL injection in CVE-2026-14705 occur?
The SQL injection vulnerability in CVE-2026-14705 occurs through manipulation of the uname/password arguments in the head.php file.
Can CVE-2026-14705 be exploited remotely?
Yes, CVE-2026-14705 can be exploited remotely by an attacker.
How can I fix CVE-2026-14705?
To fix CVE-2026-14705, it is recommended to sanitize and validate all user inputs and consider updating or patching the Code-projects Online Examination software.