Vulnerabilidades de Testa
CVEs publicadas que afetam produtos de Testa: 2 registro(s), com severidade, exploração e correções.
CVE-2021-47902
Alta · 8.2
CWE-89 27/01/2026
Testa Online Test Management System 3.4.7 - 'q' SQL Injection
Testa Online Test Management System 3.4.7 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'q' search parameter. Attackers can inject malicious SQL code in the search field to extract database information, potentially accessing sensitive user or system data.
CVE-2022-50896
Média · 6.1
CWE-79 13/01/2026
Testa 3.5.1 Online Test Management System - Reflected Cross-Site Scripting (XSS)
Testa 3.5.1 contains a reflected cross-site scripting vulnerability in the login.php redirect parameter that allows attackers to inject malicious scripts. Attackers can craft a specially encoded payload in the redirect parameter to execute arbitrary JavaScript in victim's browser context.