| शीर्षक | Projectworlds Online Examination System Project in Php MYSQL 1.0 SQL Injection |
|---|
| विवरण | A serious SQL injection vulnerability was discovered in the account.php file of the "Test Your Skill" online exam system due to insufficient user input validation when processing the "eid" parameter, allowing attackers to inject malicious SQL queries. As a result, attackers can bypass authentication to gain unauthorized database access, view, modify, or delete exam data, and access sensitive information without a normal login. Immediate remediation measures are required to ensure system security and protect data integrity. |
|---|
| स्रोत | ⚠️ https://github.com/ganzhi-qcy/cve/issues/9 |
|---|
| उपयोगकर्ता | quchunyi1 (UID 86520) |
|---|
| सबमिशन | 12/06/2025 09:37 AM (1 वर्ष पहले) |
|---|
| संयम | 19/06/2025 11:45 AM (7 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 191388 [Project Worlds Online Examination System 1.0 account.php eid SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|