Vulnerabilities

TI-2021-22516 CVE-2021-47902 · GHSA-4x7p-vr3c-7p66

Testa Online Test Management System 3.4.7 - 'q' SQL Injection

HIGH 77

Testa Online Test Management System 3.4.7 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'q' search parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00285 Published 2026-01-27 No fix listed CWE-89

TI-2022-26350 CVE-2022-50896 · GHSA-j8c8-7496-m39v

Testa 3.5.1 Online Test Management System - Reflected Cross-Site Scripting (XSS)

MEDIUM 56

Testa 3.5.1 contains a reflected cross-site scripting vulnerability in the login.php redirect parameter that allows attackers to inject malicious scripts.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00415 Published 2026-01-13 No fix listed CWE-79

TI-2013-05646 CVE-2013-6873 · GHSA-m7fg-273r-qgjr

SQL injection vulnerability in Testa Online Test Management System (OTMS) 2.0.0.2 allows…

LOW 37

SQL injection vulnerability in Testa Online Test Management System (OTMS) 2.0.0.2 allows remote attackers to execute arbitrary SQL commands via the test_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02292 Published 2013-11-26 No fix listed CWE-89

Vulnerabilities

Filters

Testa Online Test Management System 3.4.7 - 'q' SQL Injection

Testa 3.5.1 Online Test Management System - Reflected Cross-Site Scripting (XSS)

SQL injection vulnerability in Testa Online Test Management System (OTMS) 2.0.0.2 allows…