Description
Multiple SQL injection vulnerabilities exist in Testa OTMS (Online Test Management System). Various input parameters are not properly sanitized before being used in database queries.
Impact
Attackers can manipulate SQL queries to extract sensitive data from the database, bypass authentication, modify or delete records, and potentially gain administrative access to the system.
Solution
Apply input validation and parameterized queries. Contact the vendor for patches.