CVE-2022-1076

CVE-2022-1076 affects the Automatic Question Paper Generator System 1.0. The vulnerable component is the file /aqpg/users/login.php, where manipulation of the First Name/Middle Name/Last Name parameters leads to a cross-site scripting (XSS) vulnerability. The vulnerability is described as exploit...

CVE-2022-1073

The CVE-2022-1073 issue affects Automatic Question Paper Generator 1.0. It is described as allowing remote privilege escalation. Documents provide CVSS v3.1/2.0 scores (CRITICAL/high), attack vector NETWORK with low complexity and no authentication required, but the exact root cause, vulnerable c...

CVE-2022-1073 Automatic Question Paper Generator password recovery

A vulnerability was found in Automatic Question Paper Generator 1.0. It has been declared as critical. An attack leads to privilege escalation. The attack can be launched remotely...

PT-2022-13638

Name of the Vulnerable Software and Affected Versions Automatic Question Paper Generator System version 1.0 Description A problematic issue has been found, affecting the My Account Page component, specifically the file /aqpg/users/login.php. The manipulation of the First Name, Middle Name, and La...

PT-2022-13635

Name of the Vulnerable Software and Affected Versions Automatic Question Paper Generator version 1.0 Description A critical issue has been discovered that allows for privilege escalation through a remote attack. Recommendations For Automatic Question Paper Generator version 1.0, at the moment,...

CVE-2022-1076: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aqpg/users/login.php of the component My Account Page. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is...

CVE-2022-1073: Weak Password Recovery Mechanism for Forgotten Password

A vulnerability was found in Automatic Question Paper Generator 1.0. It has been declared as critical. An attack leads to privilege escalation. The attack can be launched remotely...