CVE-2021-47902

Testa Online Test Management System 3.4.7 - 'q' SQL Injection

CVSS 8.8 HIGHEPSS 0.2%CWE-89

Testa Online Test Management System 3.4.7 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'q' search parameter. Attackers can inject malicious SQL code in the search field to extract database information, potentially accessing sensitive user or system data.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Produtos afetados

Testa · Testa Online Test Management System

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://web.archive.org/web/20220406031253/https://testa.cc/https://www.exploit-db.com/exploits/49194 https://www.vulncheck.com/advisories/testa-online-test-management-system-q-sql-injection