CVE-2024-40479 in Online Exam System

Riassunto

di MITRE • 12/08/2024

A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL commands via the "eid" parameter.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsabile: MITRE
• Prenotare: 05/07/2024
• Divulgazione: 12/08/2024
• Moderazione: accettato
• Voce: VDB-274086
• CPE: pronto
• CWE: CWE-89 (confermato)
• CVSS: 8.1 (CNA)
• EPSS: 0.00797
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-40479
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-40479
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-40479/