CVE-2023-1474

CVE-2023-1474 affects SourceCodester Automatic Question Paper Generator System 1.0, specifically the GET Parameter Handler in users/question_papers/manage_question_paper.php. The root cause is improper handling of the id parameter, enabling SQL injection remotely; exploits have been disclosed pub...

CVE-2022-1073

The CVE-2022-1073 issue affects Automatic Question Paper Generator 1.0. It is described as allowing remote privilege escalation. Documents provide CVSS v3.1/2.0 scores (CRITICAL/high), attack vector NETWORK with low complexity and no authentication required, but the exact root cause, vulnerable c...

CVE-2022-1076

CVE-2022-1076 affects the Automatic Question Paper Generator System 1.0. The vulnerable component is the file /aqpg/users/login.php, where manipulation of the First Name/Middle Name/Last Name parameters leads to a cross-site scripting (XSS) vulnerability. The vulnerability is described as exploit...

CVE-2023-1591

The CVE-2023-1591 entry concerns a SQL injection in SourceCodester Automatic Question Paper Generator System 1.0. Affected component: the file classes/Users.php?f=save_ruser. The vulnerability is triggered by manipulating the id/email parameters, with remote initial access described as possible i...

CVE-2023-1592

CVE-2023-1592 affects SourceCodester Automatic Question Paper Generator System 1.0. The vulnerability is an SQL injection in the file admin/courses/view_class.php of the GET Parameter Handler, caused by unsafely handling the id argument. Exploitation can be remote, with high potential impact to c...

CVE-2023-1441

CVE-2023-1441 affects SourceCodester Automatic Question Paper Generator System 1.0, impacting the GET Parameter Handler in admin/courses/view_course.php. The root cause is a vulnerability in the id parameter that enables SQL injection, allowing remote exploitation without user interaction. Multip...

CVE-2023-1593

SourceCodester Automatic Question Paper Generator System 1.0 is vulnerable to cross-site scripting via the description parameter in the file/classes/Master.php?f=save_class endpoint. The issue arises from improper handling of the description argument, enabling remote attackers to inject scripts. ...

CVE-2023-1666

SourceCodester Automatic Question Paper Generator System 1.0 has a SQL injection vulnerability in the GET Parameter Handler, specifically in users/classes/view_class.php where manipulating the id parameter allows remote exploitation. The issue affects the view_class.php code path and is described...

CVE-2023-1440

CVE-2023-1440 affects SourceCodester Automatic Question Paper Generator System 1.0, specifically the GET Parameter Handler in the file users/user/manage_user.php. The vulnerability arises from manipulation of the id argument, resulting in SQL injection. It can be exploited remotely, and public di...