CVE-2023-45118

Summary

CVE-2023-45118 is a vulnerability affecting the Online Examination System v1.0. This issue allows authenticated attackers to inject malicious SQL queries into the application due to insufficient input validation on the 'fdid' parameter in the /update.php resource. As a result, attackers can manipulate the database and potentially gain unauthorized access or modify data. The lack of filtering of unvalidated user input poses a significant risk to the system's security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.