CVE-2023-45125

Rejected reason: It is a duplicate.
CVSS

No CVSS.

References

No reference.

Configurations

No configuration.

History

02 Jan 2024, 16:15

Type Values Removed Values Added
CPE cpe:2.3:a:projectworlds:online_examination_system:1.0:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 8.8
v2 : unknown
v3 : unknown
Summary Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'time' parameter of the update.php resource does not validate the characters received and they are sent unfiltered to the database. Rejected reason: It is a duplicate.
References
  • {'url': 'https://fluidattacks.com/advisories/argerich/', 'name': 'https://fluidattacks.com/advisories/argerich/', 'tags': ['Exploit', 'Third Party Advisory'], 'refsource': ''}
  • {'url': 'https://projectworlds.in/', 'name': 'https://projectworlds.in/', 'tags': ['Product'], 'refsource': ''}
CWE CWE-89

28 Dec 2023, 20:46

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8
CPE cpe:2.3:a:projectworlds:online_examination_system:1.0:*:*:*:*:*:*:*
References () https://projectworlds.in/ - () https://projectworlds.in/ - Product
References () https://fluidattacks.com/advisories/argerich/ - () https://fluidattacks.com/advisories/argerich/ - Exploit, Third Party Advisory

21 Dec 2023, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-12-21 19:15

Updated : 2024-02-05 00:22


NVD link : CVE-2023-45125

Mitre link : CVE-2023-45125

CVE.ORG link : CVE-2023-45125


JSON object : View

Products Affected

No product.

CWE

No CWE.