Unscored CVE-2023-42359 EUVD-2023-46812GHSA-vhhv-vfvc-f8c3

SQL injection vulnerability in Exam Form Submission in PHP with Source Code v.1.0 allows a remote attacker to escalate privileges via the v…

Published Sep 18, 2023 · Updated Sep 25, 2024 · Assigned by mitre

Description

SQL injection vulnerability in Exam Form Submission in PHP with Source Code v.1.0 allows a remote attacker to escalate privileges via the val-username parameter in /index.php.

References

https://upbeat-washer-def.notion.site/Exam-Form-Submission-In-PHP-SQL-Injection-in-index-php-bd71962db712459488019d531ab2f6f2?pvs=4