Kashipara Online Exam System SQL Injection Vulnerability in Profile Update Page
Vulnerability
A SQL injection vulnerability has been identified in the profile update page of Kashipara Online Exam System version 1.0. This vulnerability allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized database access. The injection can be performed via the rname, rcollage, rnumber, rgender, and rpassword parameters in a POST HTTP request.
Impact
Exploitation of this vulnerability allows for arbitrary SQL command execution, which could be used to manipulate the database or access sensitive information.
Added: Jan 12, 2026, 8:18 PM
Updated: Jan 12, 2026, 9:19 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
7.4remediation
0.0relevance
1.9threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.