CVE-2020-35271

Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting XSS in the Employees, First Name and Last Name fields...

Cross site scripting

Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting XSS in the Employees, First Name and Last Name fields...

CVE-2020-35271

CVE-2020-35271 affects the Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in the Employees, First Name, and Last Name fields. Exploitation details are not provided in the connected documents, and no remediation or ...

CVE-2020-35272: Improper Neutralization of Input During Web Page Generation

Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting XSS in the Admin Portal in the Task and Description fields...

CVE-2020-35271: Improper Neutralization of Input During Web Page Generation

Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting XSS in the Employees, First Name and Last Name fields...

PT-2021-11744

Name of the Vulnerable Software and Affected Versions: Employee Performance Evaluation System in PHP/MySQLi with Source Code version 1.0 Description: The issue concerns cross-site scripting XSS in the Admin Portal, specifically in the Task and Description fields. This allows for potential malicio...

PT-2021-11743

Name of the Vulnerable Software and Affected Versions: Employee Performance Evaluation System in PHP/MySQLi with Source Code version 1.0 Description: The issue concerns cross-site scripting XSS in the Employees, First Name, and Last Name fields. This means that an attacker could potentially injec...

Employee Performance Evaluation System Cross-Site Scripting Vulnerability

SourceCodester Employee Performance Evaluation System is a Php-based website builder for employee performance management from SourceCodester, Inc. A cross-site scripting vulnerability exists in the Employee Performance Evaluation System that originates in the First Name and Last Name fields of...

Employee Performance Evaluation System 1.0 Cross Site Scripting

Exploit Title: Employee Performance Evaluation System 1.0 - ' Task and Description' Persistent Cross Site Scripting Date: 08/12/2020 Exploit Author: Ritesh Gohil Vendor Homepage: https://www.sourcecodester.com Software Link:...

SQL Injection Vulnerability in Frontend of Queue Evaluation Integrated Management System V5.3

Queuing evaluation integrated management system V5.3, make full use of the queuing time for self-service filling operations, fill out a single queue but not the number, lifting the customer to fill out a single worry. SQL injection vulnerability exists in the frontend of Queue Evaluation Integrat...

SQL injection vulnerability in the frontend of Queue Evaluation Integrated Management System V5.3 (CNVD-2019-41011)

Queuing evaluation integrated management system V5.3, make full use of the queuing time for self-service filling operations, fill out a single queue but not the number, lifting the customer to fill out a single worry. SQL injection vulnerability exists in the frontend of Queue Evaluation Integrat...

File upload vulnerability in the frontend of Queue Evaluation Integrated Management System V5.3 (CNVD-2019-41009)

Queuing evaluation integrated management system V5.3, make full use of the queuing time for self-service filling operations, fill out a single queue but not the number, lifting the customer to fill out a single worry. Queue Evaluation Integrated Management System V5.3, there is a file upload...

SQL Injection Vulnerability in Bid Evaluation Expert Pool System V1.0

Gansu Chengxing Information Technology Co., Ltd. developed to meet the needs of various types of public resource transactions, can provide timely, reliable and effective support for the Chengxing public resource trading platform. SQL injection vulnerability exists in the bid evaluation expert...

Open Faculty Evaluation System SQL Injection Vulnerability

Open Faculty Evaluation System is a PHP and MySQL based teacher evaluation system. The system provides Web-based graphical reports and Excel file reports, and supports student subject ratings for teachers. A SQL injection vulnerability exists in the submitfeedback.php file in Open Faculty...

CVE-2018-18758

Open Faculty Evaluation System 7 for PHP 7 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18757...

Sql injection

Open Faculty Evaluation System 5.6 for PHP 5.6 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18758...

CVE-2018-18757

Open Faculty Evaluation System 5.6 for PHP 5.6 contains an SQL Injection in submit_feedback.php. The issue stems from lack of validation of externally supplied SQL statements, enabling an attacker to execute arbitrary SQL. This vulnerability is separate from CVE-2018-18758 and has multiple CNVD/N...

CVE-2018-18758

CVE-2018-18758 affects Open Faculty Evaluation System (OFES) version 7 on PHP 7. The vulnerability is a SQL Injection in submit_feedback.php caused by lack of validation of externally supplied SQL statements. Related CNVD entries also cover OFES 5.6 (PHP 5.6) and OFES 7, indicating the same issue...

PT-2019-9628

Name of the Vulnerable Software and Affected Versions Open Faculty Evaluation System 7 for PHP 7 Description The issue allows for SQL Injection in the submit feedback.php file. Recommendations For Open Faculty Evaluation System 7 for PHP 7, update the submit feedback.php file to prevent SQL...

PT-2019-9627

Name of the Vulnerable Software and Affected Versions Open Faculty Evaluation System version 5.6 Description The issue allows for SQL Injection in the submit feedback.php file. Recommendations For Open Faculty Evaluation System version 5.6, update to a version that fixes the SQL Injection issue i...