Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Turna

#25925of 53,622
9.8Total CVSS
Vulnerabilities · 1
PT-2024-39364
9.8
2024-09-19
Unknown · Code-Projects Online Quiz Site · CVE-2024-9009
Name of the Vulnerable Software and Affected Versions: code-projects Online Quiz Site version 1.0 Description: A critical issue has been found in the code-projects Online Quiz Site, affecting the file showtest.php. The manipulation of the `subid` argument leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Recommendations: For code-projects Online Quiz Site version 1.0, patch immediately and validate user input to prevent SQL injection attacks. As a temporary workaround, consider restricting access to the showtest.php file until a patch is available. Additionally, restrict the manipulation of the `subid` argument to minimize the risk of exploitation.