Unknown · Code-Projects Online Quiz Site · CVE-2024-9009
Name of the Vulnerable Software and Affected Versions:
code-projects Online Quiz Site version 1.0
Description:
A critical issue has been found in the code-projects Online Quiz Site, affecting the file showtest.php. The manipulation of the `subid` argument leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Recommendations:
For code-projects Online Quiz Site version 1.0, patch immediately and validate user input to prevent SQL injection attacks. As a temporary workaround, consider restricting access to the showtest.php file until a patch is available. Additionally, restrict the manipulation of the `subid` argument to minimize the risk of exploitation.