PT-2024-28866 · Unknown · Kashipara Online Exam System
CVE-2024-40479
·
Published
2024-08-09
·
Updated
2025-11-19
CVSS v3.1
8.1
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Kashipara Online Exam System version 1.0
Description
A SQL injection vulnerability in "/admin/quizquestion.php" allows remote attackers to execute arbitrary SQL commands via the
eid parameter.Recommendations
For Kashipara Online Exam System version 1.0, as a temporary workaround, consider restricting access to the "/admin/quizquestion.php" endpoint until a patch is available. Avoid using the
eid parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Kashipara Online Exam System