CVE-2020-37057

8.8 highEPSS 0.6%

High (8.8) in sunnygkp10 online-exam-system-. EPSS 0.6% chance of exploitation in the next 30 days.

Online-Exam-System 2015 contains a SQL injection vulnerability in the feedback module that allows attackers to manipulate database queries through the 'fid' parameter. Attackers can inject malicious SQL code into the 'fid' parameter to potentially extract, modify, or delete database information.

Severity

CVSS 4.0

8.8 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2026-01-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sunnygkp10:online-exam-system-

References

https://github.com/sunnygkp10/Online-Exam-System-.git
https://www.exploit-db.com/exploits/48529
https://www.vulncheck.com/advisories/online-exam-system-fid-sql-injection

Check your stack JSON