CVE-2013-7175

Multiple SQL injection vulnerabilities in Avanset Visual CertExam Manager 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) Title, (2) File name, or (3) Candidate Name field.

• CWE-89

• http://osvdb.org/102414
• http://www.kb.cert.org/vuls/id/869702Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/65104
• http://osvdb.org/102414
• http://www.kb.cert.org/vuls/id/869702Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/65104

Published

Jan 24, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-7168Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-7169Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-7171Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3…9.8
• CVE-2013-7172Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable …7.8
• CVE-2013-7173Belkin n750 routers have a buffer overflow.9.8
• CVE-2013-7174Absolute path traversal vulnerability in cgi-bin/jc.cgi in Q…
• CVE-2013-7176config/filter.d/postfix.conf in the postfix filter in Fail2b…
• CVE-2013-7177config/filter.d/cyrus-imap.conf in the cyrus-imap filter in …
• CVE-2013-7179The ping functionality in cgi-bin/diagnostic.cgi on Seowon I…
• CVE-2013-7180Cobham SAILOR 900 VSAT; SAILOR FleetBroadBand 150, 250, and …
• CVE-2013-7181Cross-site scripting (XSS) vulnerability in user/ldap_user/a…
• CVE-2013-7182Cross-site scripting (XSS) vulnerability in firewall/schedul…