Autolab 路径遍历漏洞

Autolab is a course management service. It supports automatically graded programming assignments. A security vulnerability exists in Autolab version 2.10.0 and earlier, which stems from a Tar slip vulnerability found in Autolab's Installation Evaluation feature, which can be exploited by an...

CVE-2023-33439

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/managetask.php?id=...

CVE-2023-33439: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/managetask.php?id=...

CVE-2023-33440: Improper Control of Generation of Code

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=saveuser...

CVE-2023-33439

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/managetask.php?id=...

Faculty Evaluation System SQL Injection Vulnerability

Faculty Evaluation System is a faculty evaluation system. Faculty Evaluation System v1.0 suffers from a SQL injection vulnerability, which originates from a SQL injection in /eval/admin/viewfaculty.php?id. An attacker can exploit this vulnerability by inserting SQL commands into the query string ...

CVE-2023-31843

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/viewfaculty.php?id=...

CVE-2023-31844

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/managesubject.php?id=...

CVE-2023-31845

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manageclass.php?id=...

CVE-2023-31842

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/index.php?page=editfaculty&id=...

CVE-2023-31843

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/viewfaculty.php?id=...

CVE-2023-31844

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/managesubject.php?id=...

CVE-2023-31842

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/index.php?page=editfaculty&id=...

CVE-2023-31845

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manageclass.php?id=...

Sql injection

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/viewfaculty.php?id=...

Sql injection

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/index.php?page=editfaculty&id=...

Sql injection

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manageclass.php?id=...

Faculty Evaluation System SQL注入漏洞

Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A security vulnerability exists in version v1.0 of the Sourcecodester Faculty Evaluation System, which stems from an SQL injection in /eval/index.php?page=editfaculty&id=...

Faculty Evaluation System SQL注入漏洞

Faculty Evaluation System is a faculty evaluation system. Faculty Evaluation System v1.0 suffers from a SQL injection vulnerability, which originates from a SQL injection in /eval/admin/viewfaculty.php?id. An attacker can exploit this vulnerability by inserting SQL commands into the query string ...

PT-2023-23485

Name of the Vulnerable Software and Affected Versions Sourcecodester Faculty Evaluation System version 1.0 Description The issue concerns SQL Injection via the "/eval/admin/manage subject.php?id=" endpoint. This allows for potential manipulation of database queries by injecting malicious SQL code...