Lucene search
+L

649 matches found

OSV
OSV
added 2022/04/25 4:16 p.m.6 views

CVE-2021-24800

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments...

4.3CVSS5.8AI score0.00644EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2022/04/25 3:50 p.m.29 views

CVE-2021-24800 DW Question & Answer Pro <= 1.3.4 - Arbitrary Comment Edition via IDOR

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments...

5AI score0.00644EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2022/04/25 12:0 a.m.4 views

WordPress plugin DW Question & Answer Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress DW Question...

4.3CVSS5.5AI score0.00644EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2022/04/25 12:0 a.m.7 views

WordPress plugin DW Question & Answer Pro 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress DW Question...

4.3CVSS5.5AI score0.00429EPSS
SaveExploits2References3
CNVD
CNVD
added 2022/04/20 12:0 a.m.46 views

ResearchGate Automatic Question Paper Generator System SQL Injection Vulnerability

ResearchGate Automatic Question Paper Generator System an automated question paper generation system. researchGate Automatic Question Paper Generator System version v1.0 is vulnerable to a SQL injection vulnerability, which stems from The id parameter in the GET request may lead to a time-based S...

7.5CVSS9.8AI score0.01151EPSS
SaveExploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/04/18 2:15 p.m.12 views

CVE-2022-26631

Automatic Question Paper Generator v1.0 contains a Time-Based Blind SQL injection vulnerability via the id GET parameter...

9.8CVSS5.9AI score0.01151EPSS
SaveExploits0References3
CVE
CVE
added 2022/04/18 1:18 p.m.79 views

CVE-2022-26631

CVE-2022-26631 affects the Automatic Question Paper Generator v1.0. The vulnerability is a time-based blind SQL injection exploitable through the id parameter in GET requests, enabling an attacker to infer data from the database. The issue is documented across multiple sources (NVD entry and seve...

9.8CVSS9.8AI score0.01151EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/04/18 1:18 p.m.34 views

CVE-2022-26631

Automatic Question Paper Generator v1.0 contains a Time-Based Blind SQL injection vulnerability via the id GET parameter...

10AI score0.01151EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/04/18 12:0 a.m.7 views

ResearchGate Automatic Question Paper Generator System SQL注入漏洞

ResearchGate Automatic Question Paper Generator System an automated question paper generation system. researchGate Automatic Question Paper Generator System version v1.0 is vulnerable to a SQL injection vulnerability, which stems from The id parameter in the GET request may lead to a time-based S...

9.8CVSS6.1AI score0.01151EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/03/31 12:0 a.m.24 views

ResearchGate Automatic Question Paper Generator System Cross-Site Scripting Vulnerability

ResearchGate Automatic Question Paper Generator System 1.0 is an automatic question paper generation system from ResearchGate, a German company. A cross-site scripting vulnerability exists in the account page component /aqpg/users/login.php, where the last name parameter lacks a validation filter...

4.3CVSS5.9AI score0.00553EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2022/03/29 6:15 a.m.18 views

CVE-2022-1076

A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aqpg/users/login.php of the component My Account Page. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is...

6.1CVSS0.00553EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/29 6:15 a.m.5 views

CVE-2022-1076

A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aqpg/users/login.php of the component My Account Page. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is...

6.1CVSS4.3AI score0.00553EPSS
SaveExploits0References1
NVD
NVD
added 2022/03/29 6:15 a.m.23 views

CVE-2022-1073

A vulnerability was found in Automatic Question Paper Generator 1.0. It has been declared as critical. An attack leads to privilege escalation. The attack can be launched remotely...

9.8CVSS0.00794EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/29 6:15 a.m.7 views

CVE-2022-1073

A vulnerability was found in Automatic Question Paper Generator 1.0. It has been declared as critical. An attack leads to privilege escalation. The attack can be launched remotely...

9.8CVSS7.1AI score0.00794EPSS
SaveExploits0References1
Prion
Prion
added 2022/03/29 6:15 a.m.17 views

Cross site scripting

A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aqpg/users/login.php of the component My Account Page. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is...

4.3CVSS6AI score0.00553EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/03/29 5:50 a.m.8 views

CVE-2022-1076 Automatic Question Paper Generator System My Account Page login.php cross site scripting

A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aqpg/users/login.php of the component My Account Page. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is...

4.3CVSS6.2AI score0.00553EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/03/29 5:50 a.m.27 views

CVE-2022-1076 Automatic Question Paper Generator System My Account Page login.php cross site scripting

A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aqpg/users/login.php of the component My Account Page. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is...

4.3CVSS6.2AI score0.00553EPSS
SaveExploits0References1
CVE
CVE
added 2022/03/29 5:50 a.m.61 views

CVE-2022-1076

CVE-2022-1076 affects the Automatic Question Paper Generator System 1.0. The vulnerable component is the file /aqpg/users/login.php, where manipulation of the First Name/Middle Name/Last Name parameters leads to a cross-site scripting (XSS) vulnerability. The vulnerability is described as exploit...

6.1CVSS5AI score0.00553EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/03/29 5:50 a.m.9 views

CVE-2022-1073 Automatic Question Paper Generator password recovery

A vulnerability was found in Automatic Question Paper Generator 1.0. It has been declared as critical. An attack leads to privilege escalation. The attack can be launched remotely...

7.3CVSS9.6AI score0.00794EPSS
SaveExploits0References1
CVE
CVE
added 2022/03/29 5:50 a.m.71 views

CVE-2022-1073

The CVE-2022-1073 issue affects Automatic Question Paper Generator 1.0. It is described as allowing remote privilege escalation. Documents provide CVSS v3.1/2.0 scores (CRITICAL/high), attack vector NETWORK with low complexity and no authentication required, but the exact root cause, vulnerable c...

9.8CVSS8.5AI score0.00794EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder