CVE-2025-51567 | Kashipara Online Exam System 1.0 HTTP Request /exam/user/profile.php rpassword sql injection

A vulnerability marked as critical has been reported in Kashipara Online Exam System 1.0. Affected by this vulnerability is an unknown functionality of the file /exam/user/profile.php of the component HTTP Request Handler. The manipulation of the argument rpassword leads to sql injection.

This vulnerability is referenced as CVE-2025-51567. Remote exploitation of the attack is possible. No exploit is available.