SourceCodester Automatic Question Paper Generator System sql injection
CVE-2023-1591
9.8CRITICAL
What is CVE-2023-1591?
A vulnerability in SourceCodester's Automatic Question Paper Generator System version 1.0 has been detected, allowing an attacker to exploit the 'id/email' arguments in the file 'classes/Users.php?f=save_ruser'. This flaw enables SQL injection attacks, potentially leading to unauthorized database access. The attack can be executed remotely, posing a significant risk to web application integrity and user data.
Affected Version(s)
Automatic Question Paper Generator System 1.0