CVE-2024-40479 | THREATINT

Assigner	mitre
Reserved	2024-07-05
Published	2024-08-09
Updated	2024-08-09

Description

A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL commands via the "eid" parameter.

References

https://www.kashipara.com/project/php/3/online-exam-php-project-source-code-download

https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Online%20Exam%20System%20v1.0/SQL%20Injection.pdf

cve.org CVE-2024-40479

nvd.nist.gov CVE-2024-40479

Download JSON

https://cve.threatint.com/CVE/CVE-2024-40479

Support options

Helpdesk Telegram

Subscribe to our newsletter to learn more about our work.