Testa vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Testa products: 2 record(s), with severity, exploitation and fixes.

Testa 1 Testa Online Test Management System 1

Exploited only (KEV) →

CVE-2021-47902 High · 8.2 CWE-89 Jan 27, 2026

Testa Online Test Management System 3.4.7 - 'q' SQL Injection

Testa Online Test Management System 3.4.7 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'q' search parameter. Attackers can inject malicious SQL code in the search field to extract database information, potentially accessing sensitive user or system data.

CVE-2022-50896 Medium · 6.1 CWE-79 Jan 13, 2026

Testa 3.5.1 Online Test Management System - Reflected Cross-Site Scripting (XSS)

Testa 3.5.1 contains a reflected cross-site scripting vulnerability in the login.php redirect parameter that allows attackers to inject malicious scripts. Attackers can craft a specially encoded payload in the redirect parameter to execute arbitrary JavaScript in victim's browser context.