PT-2024-38854 · Unknown · Code-Projects Online Quiz Site

·

CVE-2024-8169

·

Published

2024-08-26

·

Updated

2024-08-30

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: code-projects Online Quiz Site version 1.0
Description: A critical issue affects some unknown functionality of the file signupuser.php. The manipulation of the lid argument leads to SQL injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Recommendations: For code-projects Online Quiz Site version 1.0, as a temporary workaround, consider restricting access to the vulnerable file signupuser.php until a patch is available. Avoid using the lid argument in the affected functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-8169

Affected Products

Code-Projects Online Quiz Site