Lucene search
K

156 matches found

CVE
CVE
added 2025/08/26 3:2 a.m.17 views

CVE-2025-9444

The CVE concerns 1000projects Online Project Report Submission and Evaluation System 1.0. A SQL injection vulnerability exists in the file /admin/controller/delete_group_student.php, triggered by manipulating the batch_id parameter. This remote attack surface could lead to unauthorized data expos...

9.8CVSS7.5AI score0.00387EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2025/08/26 12:0 a.m.3 views

1000 Projects Online Project Report Submission and Evaluation System Security Vulnerability

1000 Projects Online Project Report Submission and Evaluation System is a 1000 Projects open source online project report submission and evaluation system . 1000 Projects Online Project Report Submission and Evaluation System version 1.0 has a security vulnerability , the vulnerability stems from...

9.8CVSS7.2AI score0.00387EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/08/26 12:0 a.m.3 views

1000 Projects Online Project Report Submission and Evaluation System Security Vulnerability

1000 Projects Online Project Report Submission and Evaluation System is a 1000 Projects open source online project report submission and evaluation system . 1000 Projects Online Project Report Submission and Evaluation System version 1.0 has a security vulnerability , the vulnerability stems from...

6.1CVSS5.5AI score0.00337EPSS
Exploits1References5
NVD
NVD
added 2025/06/29 2:15 a.m.5 views

CVE-2025-6839

A vulnerability, which was classified as critical, has been found in Conjure Position Department Service Quality Evaluation System up to 1.0.11. Affected by this issue is the function eval of the file public/assets/less/bootstrap-less/mixins/head.php. The manipulation of the argument payload lead...

6.5CVSS0.00263EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/06/29 1:31 a.m.2 views

CVE-2025-6839 Conjure Position Department Service Quality Evaluation System head.php eval backdoor

A vulnerability, which was classified as critical, has been found in Conjure Position Department Service Quality Evaluation System up to 1.0.11. Affected by this issue is the function eval of the file public/assets/less/bootstrap-less/mixins/head.php. The manipulation of the argument payload lead...

6.5CVSS6.4AI score0.00263EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/06/29 12:0 a.m.2 views

PT-2025-27339 · Unknown · Position Department Service Quality Evaluation System

Name of the Vulnerable Software and Affected Versions: Conjure Position Department Service Quality Evaluation System versions up to 1.0.11 Description: A critical vulnerability has been found in the Conjure Position Department Service Quality Evaluation System. The issue affects the eval function...

6.5CVSS7.1AI score0.00263EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2025/05/23 4:0 a.m.7 views

CVE-2023-36118

Cross Site Scripting vulnerability in Faculty Evaulation System using PHP/MySQLi v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the page parameter...

5.4CVSS7.2AI score0.00688EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/23 3:52 a.m.4 views

CVE-2023-33569

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via ip/eval/ajax.php?action=updateuser...

7.2CVSS7.7AI score0.01112EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:52 a.m.6 views

CVE-2023-33439

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/managetask.php?id=...

7.2CVSS8AI score0.03307EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:47 a.m.6 views

CVE-2023-31844

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/managesubject.php?id=...

7.2CVSS8.1AI score0.00837EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:19 a.m.5 views

CVE-2023-2369

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/managerestriction.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The explo...

9.8CVSS5.6AI score0.00728EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:3 a.m.4 views

CVE-2023-33440

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=saveuser...

7.2CVSS7.6AI score0.14507EPSS
Exploits4References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:53 a.m.5 views

CVE-2023-2365

A vulnerability has been found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file ajax.php?action=deletesubject. The manipulation of the argument id leads to sql injection. The attack can be launched...

9.8CVSS7.4AI score0.00743EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:51 a.m.5 views

CVE-2023-2367

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/manageacademic.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploi...

9.8CVSS7.4AI score0.00722EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:50 a.m.7 views

CVE-2023-2962

A vulnerability, which was classified as critical, has been found in SourceCodester Faculty Evaluation System 1.0. Affected by this issue is some unknown functionality of the file index.php?page=edituser. The manipulation of the argument id leads to sql injection. The attack may be launched...

9.8CVSS7.4AI score0.00711EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:48 a.m.5 views

CVE-2023-2366

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ajax.php?action=deleteclass. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

9.8CVSS7.4AI score0.00798EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:31 p.m.7 views

CVE-2020-35271

Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting XSS in the Employees, First Name and Last Name fields...

4.8CVSS6.1AI score0.00546EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 3:30 p.m.5 views

CVE-2020-35272

Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting XSS in the Admin Portal in the Task and Description fields...

4.8CVSS6.1AI score0.00591EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 6:54 a.m.13 views

CVE-2018-18758

Open Faculty Evaluation System 7 for PHP 7 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18757...

9.8CVSS7.6AI score0.02338EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:2 a.m.16 views

CVE-2018-18757

Open Faculty Evaluation System 5.6 for PHP 5.6 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18758...

9.8CVSS7.6AI score0.02338EPSS
Exploits2References1
Rows per page
Query Builder