Vulnerabilidades do Code-projects Online Examination System

Foi identificada uma vulnerabilidade no code-projects Online Examination System 1.0. Afeta alguma funcionalidade desconhecida do arquivo login.php. A manipulação do argumento username/password leva a injeção de SQL. O ataque pode ser iniciado remotamente.

A vulnerability was determined in code-projects Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /admin_pic.php. Executing a manipulation can lead to unrestricted upload. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

A vulnerability was found in code-projects Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Page. Performing a manipulation of the argument User results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.