Skip to content
OpenAdvisories
Unscored CVE-2013-7175 EUVD-2013-6958GHSA-29m8-82c7-qqgx

Multiple SQL injection vulnerabilities in Avanset Visual CertExam Manager 3.3 and earlier allow remote authenticated users to execute arbit…

Published Jan 24, 2014 · Updated Aug 6, 2024 · Assigned by certcc

Description

Multiple SQL injection vulnerabilities in Avanset Visual CertExam Manager 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) Title, (2) File name, or (3) Candidate Name field.

References