CVE-2023-45121

Name of the Vulnerable Software and Affected Versions Online Examination System version 1.0

Description The issue concerns multiple Authenticated SQL Injection vulnerabilities. The 'desc' parameter of the "/update.php?q=addquiz" resource does not validate the characters received, and they are sent unfiltered to the database.

Recommendations For Online Examination System version 1.0, as a temporary workaround, consider validating and filtering the input for the desc parameter in the "/update.php?q=addquiz" resource to prevent SQL injection attacks. Restrict access to the "/update.php?q=addquiz" resource until a proper fix is applied.