Lucene search
+L

645 matches found

NVD
NVD
added 2025/11/24 5:15 a.m.9 views

CVE-2025-13583

A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack can be executed remotely. The exploi...

9.8CVSS0.00379EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/24 5:15 a.m.5 views

CVE-2025-13583

A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack can be executed remotely. The exploi...

9.8CVSS5.8AI score0.00379EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/24 4:32 a.m.5 views

EUVD-2025-198610

A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack can be executed remotely. The exploi...

7.5CVSS6.5AI score0.00379EPSS
SaveExploits1References6
CVE
CVE
added 2025/11/24 4:32 a.m.20 views

CVE-2025-13583

CVE-2025-13583 affects Code-Projects Question Paper Generator 1.0, specifically the POST Parameter Handler’s signupscript.php. The vulnerability stems from manipulation of the Fname argument, which can lead to SQL injection. The issue is exploitable remotely, and the exploit has been made publicl...

9.8CVSS7.2AI score0.00379EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/11/24 4:32 a.m.22 views

CVE-2025-13583 code-projects Question Paper Generator POST Parameter signupscript.php sql injection

A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack can be executed remotely. The exploi...

7.5CVSS0.00379EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/24 4:32 a.m.4 views

CVE-2025-13583 code-projects Question Paper Generator POST Parameter signupscript.php sql injection

A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack can be executed remotely. The exploi...

7.5CVSS6.7AI score0.00379EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/11/24 12:0 a.m.7 views

Code-Projects Question Paper Generator SQL注入漏洞

Code-Projects Question Paper Generator is an open source question paper generation software from Code-Projects. Code-Projects Question Paper Generator version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter Fname in the file /signupscript.php...

9.8CVSS7.8AI score0.00379EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/11/18 12:30 p.m.11 views

EUVD-2025-197974

A security flaw has been discovered in SourceCodester Interview Management System 1.0. Affected is an unknown function of the file /editQuestion.php. The manipulation of the argument Question results in cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.1CVSS5.2AI score0.00367EPSS
SaveExploits1References6
NVD
NVD
added 2025/11/18 12:15 p.m.6 views

CVE-2025-13343

A security flaw has been discovered in SourceCodester Interview Management System 1.0. Affected is an unknown function of the file /editQuestion.php. The manipulation of the argument Question results in cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.4CVSS0.00367EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/18 12:15 p.m.5 views

CVE-2025-13343

A security flaw has been discovered in SourceCodester Interview Management System 1.0. Affected is an unknown function of the file /editQuestion.php. The manipulation of the argument Question results in cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.4CVSS4.3AI score0.00367EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/11/18 12:0 a.m.16 views

PT-2025-47297

Name of the Vulnerable Software and Affected Versions SourceCodester Interview Management System version 1.0 Description A security flaw exists in SourceCodester Interview Management System 1.0. The manipulation of the Question argument in the file /editQuestion.php can lead to cross site...

5.1CVSS5.7AI score0.00367EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.9 views

SourceCodester Interview Management System 代码注入漏洞

SourceCodester Interview Management System is a SourceCodester open source interview management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Interview Management System, which stems from an incorrect manipulation of the parameter Question in the file...

5.4CVSS4.7AI score0.00367EPSS
SaveExploits1References6
Packet Storm News
Packet Storm News
added 2025/11/08 12:0 a.m.13 views

Injecting Falsehoods: Adversarial Man-In-The-Middle Attacks Undermining Factual Recall in LLMs

LLMs are now an integral part of information retrieval. As such, their role as question answering chatbots raises significant concerns due to their shown vulnerability to adversarial man-in-the-middle MitM attacks. Here, we propose the first principled attack evaluation on LLM factual memory unde...

6.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/10/24 10:38 p.m.5 views

CVE-2025-61977

A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an attacker to decrypt an encrypted project by answering just one recovery question...

7.3CVSS7AI score0.00133EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/24 12:30 a.m.7 views

EUVD-2025-35742

A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an attacker to decrypt an encrypted project by answering just one recovery question...

7.3CVSS6.5AI score0.00133EPSS
SaveExploits0References5
NVD
NVD
added 2025/10/23 10:15 p.m.8 views

CVE-2025-61977

A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an attacker to decrypt an encrypted project by answering just one recovery question...

7.3CVSS0.00133EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/10/23 9:51 p.m.2 views

CVE-2025-61977 AutomationDirect Productivity Suite Weak Password Recovery Mechanism for Forgotten Password

A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an attacker to decrypt an encrypted project by answering just one recovery question...

7.3CVSS6.7AI score0.00133EPSS
SaveExploits0References4
CVE
CVE
added 2025/10/23 9:51 p.m.12 views

CVE-2025-61977

CVE-2025-61977 concerns AutomationDirect Productivity Suite, version 4.4.1.19. The connected sources describe a vulnerability in the weak password recovery mechanism for forgotten passwords, which allows an attacker to decrypt an encrypted project by answering a single recovery question. The CVSS...

7.3CVSS6.7AI score0.00133EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/10/23 9:51 p.m.10 views

CVE-2025-61977 AutomationDirect Productivity Suite Weak Password Recovery Mechanism for Forgotten Password

A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an attacker to decrypt an encrypted project by answering just one recovery question...

7.3CVSS0.00133EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/23 12:0 a.m.6 views

AutomationDirect Productivity Suite 授权问题漏洞

AutomationDirect Productivity Suite is a programmable logic controller programming software from AutomationDirect. An authorization issue vulnerability exists in AutomationDirect Productivity Suite version v4.4.1.19, which stems from a weak password recovery mechanism that allows an attacker to...

7.3CVSS6.8AI score0.00133EPSS
SaveExploits0References4
Rows per page
Query Builder