Quiz System Vulnerable to SQL Injection
CVE-2024-7371
8.8HIGH
What is CVE-2024-7371?
A vulnerability exists in the SourceCodester Simple Realtime Quiz System 1.0 that exposes the application to SQL injection via the /quiz_view.php file. This vulnerability arises from improper handling of user inputs, specifically the manipulation of the 'id' argument. Attackers can exploit this weakness remotely, potentially gaining unauthorized access to the database. The exploit details have been publicly disclosed, heightening the urgency for affected users to apply necessary security measures.