| शीर्षक | itsmeravitejak Online-Examination-System e6208e630b14657999bbfe4c9912302d2a1e2449 SQL Injection |
|---|
| विवरण | The affected component is the `admin/` directory: `admin/qsdb.php`, `admin/usersdb.php`, `admin/brandb.php`, `admin/topicsdb.php` and `admin/subjectsdb.php`. These endpoints build the flexigrid query by concatenating the unauthenticated POST parameters `query`, `qtype`, `sortname` and `sortorder` directly into the SQL statement:
```php
$where = "";
if ($query) $where = " WHERE $qtype LIKE '%$query%' ";
$sort = "ORDER BY $sortname $sortorder";
$sql = "SELECT q_id,q_text,q_op1,q_op2,q_op3,q_op4,q_ans,top_id FROM questions $where $sort $limit";
```
Because the endpoints perform no authentication (see the separate missing-authentication report), any visitor can exploit the injection. Submitting `qtype=1=1 UNION SELECT username,password,email,userlevel,5,6,7,8 FROM users -- ` makes the application return the `users` table (username, MD5 password hash, email, user level) inside the JSON grid, i.e. unauthenticated in-band extraction of arbitrary database content.
|
|---|
| स्रोत | ⚠️ https://github.com/itsmeravitejak/Online-Examination-System/issues/5 |
|---|
| उपयोगकर्ता | PrivacyFirst (UID 101731) |
|---|
| सबमिशन | 29/09/2026 01:16 PM (18 दिन पहले) |
|---|
| संयम | 17/10/2026 11:35 AM (18 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 421583 [itsmeravitejak Online-Examination-System तक e6208e630b14657999bbfe4c9912302d2a1e2449 subjectsdb.php query/qtype/sortname/sortorder SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|