CVE-2017-17622

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Online Exam Test Application Script version 1.6 has a SQL Injection vulnerability via the sort parameter in the exams.php file.

Exploitation of this vulnerability could lead to unauthorized access to the database and leakage of sensitive information.

It is recommended to validate and sanitize input data and to update the application to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.