CVE-2021-42666

A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to quiz_question.php, which could let a malicious…

published November 5, 2021

CVSS
—
EPSS
5%
Percentile
91.5
In the wild
Unconfirmed
What it is

A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to quiz_question.php, which could let a malicious user extract sensitive data from the web server and in some cases use this vulnerability in order to get a remote code execution on the remote web server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04521 · 91.5th percentile
Published
2021-11-05T12:24Z
EPSS history
Timeline
  • 05 NOV 12:24Z
    A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to quiz_question.php, which could let a malicious…
    cvelistv5