CVE-2023-51051

Summary

CVE-2023-45121: The Online Examination System v1.0 is found to have multiple Authenticated SQL Injection vulnerabilities. The weakness lies in the 'desc' parameter of the /update.php?q=addquiz resource, which fails to validate user input, allowing malicious characters to directly impact the database queries. This issue could potentially lead to sensitive data exposure or system compromise.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.