high7.5Public exploit code
CVE-2013-6873
SQL injection vulnerability in Testa Online Test Management System (OTMS) 2.0.0.2 allows remote attackers to execute arbitrary SQL commands via the test_id par…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Testa OTMS - Multiple SQL Injections2013-11-13 · webapps · php · Verified
Impact
SQL injection vulnerability in Testa Online Test Management System (OTMS) 2.0.0.2 allows remote attackers to execute arbitrary SQL commands via the test_id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Testa | Online Test Management System | Version 2.0.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/99992
- http://packetstormsecurity.com/files/124035/testa-sql.txt
- http://secunia.com/advisories/55752
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89082
- http://osvdb.org/99992
- http://packetstormsecurity.com/files/124035/testa-sql.txt
- http://secunia.com/advisories/55752
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89082