Security Advisory

CVE-2023-45116

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-12-21 15:42:37

Last updated 2025-05-19 14:09:12

Assigner Fluid Attacks

CVSS score 8.8

State PUBLISHED

Description

Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'demail' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database.

← Browse all CVEs View on cve.org ↗