Testa

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Testa records in CISA KEV

No Testa vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Online Test Management System 1 record LOW

Records

3 records

TI-2021-22516 CVE-2021-47902 · GHSA-4x7p-vr3c-7p66

Testa Online Test Management System 3.4.7 - 'q' SQL Injection

HIGH 77

Testa Online Test Management System 3.4.7 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'q' search parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00285 Published 2026-01-27 No fix listed CWE-89

TI-2022-26350 CVE-2022-50896 · GHSA-j8c8-7496-m39v

Testa 3.5.1 Online Test Management System - Reflected Cross-Site Scripting (XSS)

MEDIUM 56

Testa 3.5.1 contains a reflected cross-site scripting vulnerability in the login.php redirect parameter that allows attackers to inject malicious scripts.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00415 Published 2026-01-13 No fix listed CWE-79

TI-2013-05646 CVE-2013-6873 · GHSA-m7fg-273r-qgjr

SQL injection vulnerability in Testa Online Test Management System (OTMS) 2.0.0.2 allows…

LOW 37

SQL injection vulnerability in Testa Online Test Management System (OTMS) 2.0.0.2 allows remote attackers to execute arbitrary SQL commands via the test_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02292 Published 2013-11-26 No fix listed CWE-89

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0