CVE-2017-15989

Critical

Published: 31/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Online Exam Test Application allows SQL Injection via the sort parameter in resources.php in a category action.

Exploitation of this vulnerability could lead to unauthorized access to the database and leakage of sensitive information.

It is recommended to validate and sanitize input data and update the application to the latest version to mitigate the risk of SQL Injection.

Original NVD description (English source)

Online Exam Test Application allows SQL Injection via the resources.php sort parameter in a category action.