PT-2026-4727 · Unknown · Online Examination System

Geochen · Publicado 2026-01-26 · Atualizado 2026-01-31 · CVE-2026-1422

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Online Examination System version 1.0

Description A flaw exists in the Online Examination System that allows for remote SQL injection. This occurs through manipulation of the User argument within the /index.php file, specifically related to the Login Page component. The exploit for this issue has been publicly disclosed.

Recommendations Apply any available updates or patches to address the SQL injection vulnerability in the /index.php file. As a temporary workaround, consider restricting or carefully validating the User input parameter to prevent malicious SQL code injection.

Exploit

Correção

SQL injection

Special Elements Injection

Enumeração de Fraquezas

CWE-89

CWE-74

Identificadores relacionados

CVE-2026-1422

Produtos afetados

Online Examination System

Referências · 13

• 🔥 https://github.com/geo-chen/code-projects/blob/main/Online%20Examination%20System%20In%20PHP%20With%20Source%20Code.md#finding-2-sql-injection-on-login-page · Exploit
• https://twitter.com/cracbot/status/2017553491552874609 · Publicação no Twitter
• https://code-projects.org · Nota
• https://t.me/cveNotify/149832 · Publicação no Telegram
• https://twitter.com/cracbot/status/2017191113543807118 · Publicação no Twitter
• https://vuldb.com/?id.342838 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-1422 · Nota de Segurança
• https://vuldb.com/?submit.736606 · Nota
• https://t.me/CVEtracker/42986 · Publicação no Telegram
• https://t.me/cveNotify/150135 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2026-1422 · Aviso do Fabricante
• https://vuldb.com/?ctiid.342838 · Nota
• https://twitter.com/CVEnew/status/2015673749035520214 · Publicação no Twitter