Description

A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critical. This vulnerability affects unknown code of the file users/classes/view_class.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224104.

Related CPE's

a

automatic_question_paper_generator_system_project

automatic_question_paper_generator_system

1.0

Vulnerable

References

https://github.com/si-xiao-kai/bug_report/blob/main/SQLi-1.md

ExploitThird Party Advisory

https://vuldb.com/?ctiid.224104

Permissions RequiredThird Party Advisory

https://vuldb.com/?id.224104

Permissions RequiredThird Party Advisory

Weaknesses

[email protected]

Primary
CWE-89

[email protected]

Secondary
CWE-89

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 · Critical

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-03-27T21:15:10.677

2 years ago

Last modified

2024-05-17T02:18:20.140

1 year ago