PT-2024-28866
CVE-2024-40479
·
تاريخ النشر
2024-08-09
·
تاريخ التحديث
2025-11-19
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Kashipara Online Exam System version 1.0
Description
A SQL injection vulnerability in "/admin/quizquestion.php" allows remote attackers to execute arbitrary SQL commands via the
eid parameter.Recommendations
For Kashipara Online Exam System version 1.0, as a temporary workaround, consider restricting access to the "/admin/quizquestion.php" endpoint until a patch is available. Avoid using the
eid parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾