A SQL injection vulnerability has been discovered in code-projects Online Examination System 1.0, specifically affecting the login page. An attacker can remotely exploit this vulnerability by manipulating the 'User' argument in the /index.php file.
A vulnerability was found in code-projects Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Page. Performing a manipulation of the argument User results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.