NetSight
critical9.8Public exploit code

CVE-2017-15989

Online Exam Test Application allows SQL Injection via the resources.php sort parameter in a category action.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Online Exam Test Application allows SQL Injection via the resources.php sort parameter in a category action.

Affected products

VendorProductAffected versions
Online Exam Test Application ProjectOnline Exam Test Application
All versions

Weakness classification

References