Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2026-14705: Code-projects Online Examination 1.0 SQL Injection Risk
CVE-2026-14705 · published 4 months ago
Summary
An attacker can inject malicious code into the Online Examination system's database by manipulating the username and password fields. This could allow them to access sensitive information or disrupt the system's operation. We recommend updating to a newer version of the software to fix this issue.
Original advisory text
A vulnerability was determined in code-projects Online Examination 1.0. Affected by this issue is some unknown functionality of the file head.php. Executing a manipulation of the argument uname/pas...
A vulnerability was determined in code-projects Online Examination 1.0. Affected by this issue is some unknown functionality of the file head.php. Executing a manipulation of the argument uname/password can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-74Injection
CWE-89SQL Injection
Timeline
Published5 Jul 2026
Updated3 Nov 2026
First seen5 Jul 2026
Sources
CVE-2026-14705 · NVD
Track software like this
Free during beta