A flaw has been found in itsourcecode Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 5.5 · angeljudesuarezNVD modified 2026-10-08 12:10
Affected (CPE criteria) 1
cpe:2.3:a:angeljudesuarez:online_examination_system:1.0:*:*:*:*:*:*:*
References 6
- https://github.com/iMayday-Yee/Vulnerability/issues/3 Exploit, Issue Tracking, Third Party Advisory
- https://itsourcecode.com/ Product
- https://vuldb.com/?ctiid.328220 Permissions Required, VDB Entry
- https://vuldb.com/?id.328220 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.671467 Third Party Advisory, VDB Entry
- https://github.com/iMayday-Yee/Vulnerability/issues/3 Exploit, Issue Tracking, Third Party Advisory