Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-79899
HistoryApr 20, 2022 - 12:00 a.m.

ResearchGate Automatic Question Paper Generator System SQL Injection Vulnerability

2022-04-2000:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
researchgate
question paper generator
sql injection
vulnerability
get request
version v1.0
time-based
sensitive data theft

EPSS

0.002

Percentile

55.3%

ResearchGate Automatic Question Paper Generator System an automated question paper generation system. researchGate Automatic Question Paper Generator System version v1.0 is vulnerable to a SQL injection vulnerability, which stems from The id parameter in the GET request may lead to a time-based SQL blind injection vulnerability. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

EPSS

0.002

Percentile

55.3%

Related for CNVD-2022-79899