CVE-2024-8218 MEDIUM

CVE-2024-8218: code-projects Online Quiz Site index.php sql injection

Vendor Code-Projects

Product Online Quiz Site

Weakness CWE-89 · SQLi

Published August 27, 2024

Last update August 28, 2024

View on NVD All CVEs

CVSS base score

6.9/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability was found in code-projects Online Quiz Site 1.0 and classified as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument loginid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

August 27, 2024 CVE published

August 28, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-8218

Related vulnerabilities

04Related CVE

CVE-2015-10016 jeff-kelley opensim-utils regionscrits.php DatabaseForRegion sql injection CVE-2025-3335 codeprojects Online Restaurant Management System category_update.php sql injection CVE-2025-3799 WCMS AnonymousController.php sql injection CVE-2025-4306 PHPGurukul Nipah Virus Testing Management System edit-phlebotomist.php sql injection CVE-2026-26198 ormar is vulnerable to SQL Injection through aggregate functions min() and max()