CVE-2023-45119

Summary

CVE-2023-45119 is a vulnerability affecting the Online Examination System v1.0. This issue involves authenticated SQL Injection, which allows attackers to inject malicious SQL commands into the application by exploiting the lack of input validation on the 'n' parameter used in the /update.php?q=quiz resource. The unfiltered user input is directly sent to the database, posing a significant risk for data manipulation and unauthorized access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.