Lucene search
+L

842 matches found

Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•18 views

PT-2025-52357

Name of the Vulnerable Software and Affected Versions Custom Question Answering affected versions not specified Description An elevation of privilege issue exists in Custom Question Answering. The issue allows for privilege escalation. No information is available regarding the number of potential...

9.9CVSS6.7AI score0.0071EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/12/07 9:32 p.m.•6 views

CVE-2025-14203 code-projects Question Paper Generator selectquestionuser.php sql injection

A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquestionuser.php. This manipulation of the argument subid causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and m...

6.5CVSS6.3AI score0.00351EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/07 9:32 p.m.•40 views

CVE-2025-14203 code-projects Question Paper Generator selectquestionuser.php sql injection

A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquestionuser.php. This manipulation of the argument subid causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and m...

6.5CVSS0.00351EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/07 9:32 p.m.•39 views

CVE-2025-14203

CVE-2025-14203 affects Code-Projects Question Paper Generator up to version 1.0, with the vulnerability residing in the file /selectquestionuser.php. The root cause is improper handling/manipulation of the subid parameter, enabling SQL injection. This flaw allows remote exploitation, and an explo...

8.8CVSS6.3AI score0.00351EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/07 12:00 a.m.•13 views

PT-2025-49417

A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquestionuser.php. This manipulation of the argument subid causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and m...

6.5CVSS6.9AI score0.00351EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/07 12:00 a.m.•2 views

CVE-2025-14203: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquestionuser.php. This manipulation of the argument subid causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and m...

8.8CVSS5.4AI score0.00351EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/12/07 12:00 a.m.•13 views

Code-Projects Question Paper Generator SQL注入漏洞

Code-Projects Question Paper Generator is a Code-Projects open source question paper generation software. Code-Projects Question Paper Generator 1.0 and earlier versions have a SQL injection vulnerability that stems from improper handling of the parameter subid in the file /selectquestionuser.php...

8.8CVSS6.9AI score0.00351EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/12/02 3:30 p.m.•21 views

EUVD-2025-200245

User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetUserQuestionAndAnswer' in...

6.9CVSS6.3AI score0.00304EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/02 2:16 p.m.•24 views

CVE-2025-41015

User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetUserQuestionAndAnswer' in...

7.5CVSS0.00304EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/24 5:15 a.m.•18 views

CVE-2025-13583

A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack can be executed remotely. The exploi...

9.8CVSS0.00387EPSS
SaveExploits1References5
OSV
OSV
•added 2025/11/24 5:15 a.m.•12 views

CVE-2025-13583

A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack can be executed remotely. The exploi...

9.8CVSS5.8AI score0.00387EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/11/24 4:32 a.m.•12 views

EUVD-2025-198610

A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack can be executed remotely. The exploi...

7.5CVSS6.5AI score0.00387EPSS
SaveExploits1References6
CVE
CVE
•added 2025/11/24 4:32 a.m.•35 views

CVE-2025-13583

CVE-2025-13583 affects Code-Projects Question Paper Generator 1.0, specifically the POST Parameter Handler’s signupscript.php. The vulnerability stems from manipulation of the Fname argument, which can lead to SQL injection. The issue is exploitable remotely, and the exploit has been made publicl...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/11/24 4:32 a.m.•32 views

CVE-2025-13583 code-projects Question Paper Generator POST Parameter signupscript.php sql injection

A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack can be executed remotely. The exploi...

7.5CVSS0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/24 4:32 a.m.•6 views

CVE-2025-13583 code-projects Question Paper Generator POST Parameter signupscript.php sql injection

A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack can be executed remotely. The exploi...

7.5CVSS7AI score0.00387EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/24 12:00 a.m.•16 views

Code-Projects Question Paper Generator SQL注入漏洞

Code-Projects Question Paper Generator is an open source question paper generation software from Code-Projects. Code-Projects Question Paper Generator version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter Fname in the file /signupscript.php...

9.8CVSS7.8AI score0.00387EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/24 12:00 a.m.•1 views

CVE-2025-13583: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack can be executed remotely. The exploi...

9.8CVSS5.5AI score0.00387EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/18 12:30 p.m.•20 views

EUVD-2025-197974

A security flaw has been discovered in SourceCodester Interview Management System 1.0. Affected is an unknown function of the file /editQuestion.php. The manipulation of the argument Question results in cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.1CVSS5.2AI score0.00375EPSS
SaveExploits1References6
OSV
OSV
•added 2025/11/18 12:15 p.m.•14 views

CVE-2025-13343

A security flaw has been discovered in SourceCodester Interview Management System 1.0. Affected is an unknown function of the file /editQuestion.php. The manipulation of the argument Question results in cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.4CVSS4.3AI score0.00375EPSS
SaveExploits1References5
NVD
NVD
•added 2025/11/18 12:15 p.m.•12 views

CVE-2025-13343

A security flaw has been discovered in SourceCodester Interview Management System 1.0. Affected is an unknown function of the file /editQuestion.php. The manipulation of the argument Question results in cross site scripting. It is possible to launch the attack remotely. The exploit has been...

5.4CVSS0.00375EPSS
SaveExploits1References5
Rows per page
Query Builder