Critical severity9.1NVD Advisory· Published Jan 12, 2026· Updated Jun 17, 2026
CVE-2025-51567
CVE-2025-51567
Description
A SQL Injection was found in the /exam/user/profile.php page of kashipara Online Exam System V1.0, which allows remote attackers to execute arbitrary SQL command to get unauthorized database access via the rname, rcollage, rnumber, rgender and rpassword parameters in a POST HTTP request.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:jayesh:online_exam_system:1.0:*:*:*:*:*:*:*
(expand)+ 1 more
- (no CPE)
- (no CPE)range: V1.0
Patches
Vulnerability mechanics
References
1- github.com/0xBhushan/Writeups/blob/main/CVE/Kashipara/Online%20Exam%20System/SQL%20Injection-Profile%20Update.pdfnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.