CVE-2026-2173: code-projects Online Examination System login.php sql injection
A vulnerability was identified in code-projects Online Examination System 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2173?
The severity of CVE-2026-2173 is high due to its SQL injection vulnerability that can lead to unauthorized access to sensitive data.
How do I fix CVE-2026-2173?
To fix CVE-2026-2173, validate and sanitize user inputs in the login.php file to prevent SQL injection attacks.
Which version of Online Examination System is affected by CVE-2026-2173?
CVE-2026-2173 affects version 1.0 of the code-projects Online Examination System.
What type of vulnerability is CVE-2026-2173?
CVE-2026-2173 is classified as an SQL injection vulnerability.
Can CVE-2026-2173 lead to data breaches?
Yes, CVE-2026-2173 can potentially lead to data breaches if exploited, as it allows attackers to manipulate database queries.