A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL commands via the "eid" parameter.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')