Automatic Question Paper Generator System My Account Page login.php cross site scripting
CVE-2022-1076

4.3MEDIUM

Key Information:

Vendor

Unspecified

Status
Automatic Question Paper Generator System
Vendor
CVE Published:
29 March 2022

What is CVE-2022-1076?

A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aqpg/users/login.php of the component My Account Page. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is possible to initiate the attack remotely.

Affected Version(s)

Automatic Question Paper Generator System 1.0

References

https://vuldb.com/?id.194847
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.