Lucene search
HistoryMay 26, 2023 - 4:15 p.m.
CVE-2023-33440
sourcecodester
faculty evaluation system
v1.0
code execution
vulnerability
ajax.php
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.085
Percentile
94.5%
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_user.
Affected configurations
Node
faculty_evaluation_system_projectfaculty_evaluation_systemMatch1.0
Related
cvelist
cvelist
CVE-2023-33440
2023-05-26 00:00:00
prion
prion
Code injection
2023-05-26 16:15:00
packetstorm
packetstorm
Faculty Evaluation System 1.0 Shell Upload
2023-06-01 00:00:00
cve
cve
CVE-2023-33440
2023-05-26 16:15:10
zdt
zdt
Faculty Evaluation System 1.0 - Unauthenticated File Upload Exploit
2023-05-31 00:00:00
exploitdb
exploitdb
Faculty Evaluation System 1.0 - Unauthenticated File Upload
2023-05-31 00:00:00
nuclei
nuclei
Faculty Evaluation System v1.0 - Remote Code Execution
2023-06-25 16:58:59
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.085
Percentile
94.5%
Related for NVD:CVE-2023-33440