Security Advisory
CVE-2021-47902
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Testa Online Test Management System 3.4.7 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the q search parameter. Attackers can inject malicious SQL code in the search field to extract database information, potentially accessing sensitive user or system data.