CVE-2023-45111

9.8 criticalEPSS 0.7%

Critical (9.8) in online examination system project online examination system. EPSS 0.7% chance of exploitation in the next 30 days.

Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2023-11-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

online_examination_system_project:online_examination_system

References

https://fluidattacks.com/advisories/pires
https://projectworlds.in/
https://fluidattacks.com/advisories/pires
https://projectworlds.in/

Check your stack JSON