PT-2025-47879 · Code Projects · Question Paper Generator

Yudeshui · Published 2025-11-24 · Updated 2025-11-24 · CVE-2025-13583

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Question Paper Generator version 1.0

Description A flaw exists in code-projects Question Paper Generator 1.0 related to the POST Parameter Handler component and the /signupscript.php file. Manipulation of the Fname argument can result in SQL injection. This issue is remotely exploitable, and details about the exploit are publicly available.

Recommendations Apply any available updates or patches to address the SQL injection issue in the /signupscript.php file. As a temporary workaround, consider sanitizing the Fname input to prevent SQL injection attacks.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-13583

Affected Products

Question Paper Generator

References · 12

• 🔥 https://github.com/rassec2/dbcve/issues/6 · Exploit
• https://osv.dev/vulnerability/CVE-2025-13583 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-13583 · Security Note
• https://t.me/CVEtracker/38051 · Telegram Post
• https://twitter.com/CVEnew/status/1992820448682512537 · Twitter Post
• https://vuldb.com/?ctiid.333347 · Note
• https://vuldb.com/?id.333347 · Note
• https://code-projects.org · Note
• https://vuldb.com/?submit.699591 · Note
• https://t.me/cveNotify/143738 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1992843751002173850 · Twitter Post
• https://twitter.com/vuln_tracker/status/1992928958279569636 · Twitter Post