CVE-2023-1591

A vulnerability classified as critical has been found in SourceCodester Automatic Question Paper Generator System 1.0. This affects an unknown part of the file classes/Users.php?f=save_ruser. The manipulation of the argument id/email leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-223659.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cna@vuldb.com

Published

2023-03-23

Last modified

2024-08-02

Weaknesses

CWE-89

Affected products

• Automatic Question Paper Generator System (Automatic Question Paper Generator System Project)
• Automatic Question Paper Generator System (Sourcecodester)

References

• https://vuldb.com/?ctiid.223659
• https://vuldb.com/?id.223659