CNNVD-202512-4878 Information

CNNVD ID

CNNVD-202512-4878

CVE-2025-15140

  • CNNVD Published: 2025-12-28

Description (Chinese)

Online MCQ EXAM是Saif Hassan个人开发者的一个在线考试网站。 Online MCQ EXAM存在SQL注入漏洞,该漏洞源于文件/admin/quesadd.php中参数ans1/ans2的错误操作,可能导致SQL注入。

Description (English)

Online MCQ EXAM is an online examination website for Saif Hassan personal developers. Online MCQ EXAM has an SQL injection loophole, which stems from the error of the parameter ns1/ns2 in the document/admin/quesadd.php, which may lead to SQL injection.

Hazard Level

Medium

Vulnerability Type

SQL注入

Affected Vendor

个人开发者

Published

2025-12-28

Last Modified

2026-02-24

References

https://vuldb.com/?submit.715219 https://github.com/Anti1i/cve/issues/4 https://vuldb.com/?id.338518 https://vuldb.com/?submit.715463 https://vuldb.com/?ctiid.338518 https://access.redhat.com/security/cve/cve-2025-15140

Share on: