Submit #304746: campcodes Online Examination System ≤1.0 SQL injectioninfo

Titlecampcodes Online Examination System ≤1.0 SQL injection
DescriptionSQL injection vulnerability exists in id parameter of /adminpanel/admin/facebox_modal/updateCourse.php file of Online Examination System Important user data or system data may be leaked and system security may be compromised The environment is secure and the information can be used by malicious users. Payload:id=1'+AND+(SELECT+1234+FROM+(SELECT(SLEEP(2)))updateCourse)+AND+'x'='x
Source⚠️ https://github.com/Beatriz-ai-boop/cve/blob/main/report/1.pdf
User
 willchen (UID 58863)
Submission03/26/2024 15:42 (1 Year ago)
Moderation03/26/2024 17:29 (2 hours later)
StatusAccepted
VulDB Entry258029 [Campcodes Online Examination System 1.0 updateCourse.php ID sql injection]
Points20

Do you know our Splunk app?

Download it now for free!