PT-2025-11552 · Unknown · Online Exam Mastering System
CVE-2025-25914
·
Published
2025-03-17
·
Updated
2025-04-08
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Online Exam Mastering System version 1.0
Description
The issue allows a remote attacker to execute arbitrary code via the
fid parameter in a specific API endpoint. This enables the attacker to potentially gain unauthorized access and control over the system.Recommendations
For Online Exam Mastering System version 1.0, consider restricting access to the
fid parameter to minimize the risk of exploitation until a patch is available.Exploit
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Online Exam Mastering System