Beveiligingsadvies
CVE-2023-45116
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'demail' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database.