SQL Injection Vulnerability in Frontend of Queue Evaluation Integrated Management System V5.3

Queuing evaluation integrated management system V5.3, make full use of the queuing time for self-service filling operations, fill out a single queue but not the number, lifting the customer to fill out a single worry. SQL injection vulnerability exists in the frontend of Queue Evaluation Integrat...

SQL injection vulnerability in the frontend of Queue Evaluation Integrated Management System V5.3 (CNVD-2019-41011)

Queuing evaluation integrated management system V5.3, make full use of the queuing time for self-service filling operations, fill out a single queue but not the number, lifting the customer to fill out a single worry. SQL injection vulnerability exists in the frontend of Queue Evaluation Integrat...

File upload vulnerability in the frontend of Queue Evaluation Integrated Management System V5.3 (CNVD-2019-41009)

Queuing evaluation integrated management system V5.3, make full use of the queuing time for self-service filling operations, fill out a single queue but not the number, lifting the customer to fill out a single worry. Queue Evaluation Integrated Management System V5.3, there is a file upload...

SQL Injection Vulnerability in Bid Evaluation Expert Pool System V1.0

Gansu Chengxing Information Technology Co., Ltd. developed to meet the needs of various types of public resource transactions, can provide timely, reliable and effective support for the Chengxing public resource trading platform. SQL injection vulnerability exists in the bid evaluation expert...

Open Faculty Evaluation System SQL Injection Vulnerability

Open Faculty Evaluation System is a PHP and MySQL based teacher evaluation system. The system provides Web-based graphical reports and Excel file reports, and supports student subject ratings for teachers. A SQL injection vulnerability exists in the submitfeedback.php file in Open Faculty...

CVE-2018-18758

Open Faculty Evaluation System 7 for PHP 7 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18757...

Sql injection

Open Faculty Evaluation System 5.6 for PHP 5.6 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18758...

CVE-2018-18757

Open Faculty Evaluation System 5.6 for PHP 5.6 contains an SQL Injection in submit_feedback.php. The issue stems from lack of validation of externally supplied SQL statements, enabling an attacker to execute arbitrary SQL. This vulnerability is separate from CVE-2018-18758 and has multiple CNVD/N...

CVE-2018-18758

CVE-2018-18758 affects Open Faculty Evaluation System (OFES) version 7 on PHP 7. The vulnerability is a SQL Injection in submit_feedback.php caused by lack of validation of externally supplied SQL statements. Related CNVD entries also cover OFES 5.6 (PHP 5.6) and OFES 7, indicating the same issue...

Curriculum Evaluation System SQL Injection Vulnerability

Curriculum Evaluation System is a curriculum evaluation system. A SQL injection vulnerability exists in Curriculum Evaluation System version 1.0. A remote attacker can use the login page to view, add, modify, or delete information in the back-end database...

CVE-2018-18803

Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb...

CVE-2018-18803

CVE-2018-18803 corresponds to a SQL Injection in Curriculum Evaluation System 1.0, exploitable via the login screen. Technical details in connected records show the vulnerability stems from building SQL queries by string concatenation in code paths (e.g., frmCourse.vb and includes/user.vb), enabl...

Open Faculty Evaluation System 7 - batch_name SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Open Faculty Evaluation System 7 - 'batchname' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://openfacultyeval.sourceforge.io/ Software Link:...

Open Faculty Evaluation System 7 SQL Injection

Exploit Title: Open Faculty Evaluation System 7 - 'batchname' SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://openfacultyeval.sourceforge.io/ Software Link: https://sourceforge.net/projects/openfacultyeval/files/feedbackphp7.zip/download Version: Php...

Curriculum Evaluation System 1.0 SQL Injection

Exploit Title: Curriculum Evaluation System 1.0 - SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link: https://www.sourcecodester.com/sites/default/files/download/janobe/curriculumevaluationsystem0.zip...

Open Faculty Evaluation System 5.6 - batch_name SQL Injection

Open Faculty Evaluation System 5.6 - batchname SQL Injection Exploit Title: Open Faculty Evaluation System 5.6 - 'batchname' SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://openfacultyeval.sourceforge.io/ Software Link:...