critical9.8Public exploit code
CVE-2017-15989
Online Exam Test Application allows SQL Injection via the resources.php sort parameter in a category action.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Online Exam Test Application - 'sort' SQL Injection2017-10-30 · webapps · php
Impact
Online Exam Test Application allows SQL Injection via the resources.php sort parameter in a category action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Online Exam Test Application Project | Online Exam Test Application | All versions |