critical9.8Public exploit code
CVE-2017-17622
Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Online Exam Test Application Script 1.6 - 'exams.php?sort' SQL Injection2017-12-11 · webapps · php · Verified
Impact
Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Online Exam Test Application Script Project | Online Exam Test Application Script | Version 1.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://packetstormsecurity.com/files/145329/Online-Exam-Test-Application-Script-1.6-SQL-Injection.html
- https://packetstormsecurity.com/files/145334/Online-Exam-Test-Application-Script-1.6-SQL-Injection.html
- https://www.exploit-db.com/exploits/43291/
- https://packetstormsecurity.com/files/145329/Online-Exam-Test-Application-Script-1.6-SQL-Injection.html
- https://packetstormsecurity.com/files/145334/Online-Exam-Test-Application-Script-1.6-SQL-Injection.html
- https://www.exploit-db.com/exploits/43291/