Lucene search
+L

118 matches found

Exploit DB
Exploit DB
added 2023/05/31 12:0 a.m.344 views

Faculty Evaluation System 1.0 - Unauthenticated File Upload

Exploit Title: Faculty Evaluation System 1.0 - Unauthenticated File Upload Date: 5/29/2023 Author: Alex Gan Vendor Homepage: https://www.sourcecodester.com/php/14635/faculty-evaluation-system-using-phpmysqli-source-code.html Software Link:...

7.2CVSS7AI score0.14507EPSS
SaveExploits4
CNVD
CNVD
added 2023/05/30 12:0 a.m.45 views

Faculty Evaluation System SQL Injection Vulnerability (CNVD-2023-45448)

Faculty Evaluation System is a faculty evaluation system. A SQL injection vulnerability exists in Faculty Evaluation System, which can be exploited by an attacker to directly manipulate the database by constructing malicious query statements to obtain sensitive information or perform arbitrary...

7.2CVSS7.7AI score0.03307EPSS
SaveExploits1References1
Prion
Prion
added 2023/05/29 2:15 p.m.20 views

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Faculty Evaluation System 1.0. Affected by this issue is some unknown functionality of the file index.php?page=edituser. The manipulation of the argument id leads to sql injection. The attack may be launched...

5.8CVSS9.6AI score0.00711EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/05/29 2:0 p.m.38 views

CVE-2023-2962 SourceCodester Faculty Evaluation System sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Faculty Evaluation System 1.0. Affected by this issue is some unknown functionality of the file index.php?page=edituser. The manipulation of the argument id leads to sql injection. The attack may be launched...

5.8CVSS9.9AI score0.00711EPSS
SaveExploits1References3
CVE
CVE
added 2023/05/29 2:0 p.m.56 views

CVE-2023-2962

The CVE-2023-2962 issue affects SourceCodester Faculty Evaluation System 1.0, specifically the file index.php?page=edit_user. The root cause is improper handling of the id parameter, enabling SQL injection that can be triggered remotely. Multiple connected sources corroborate a critical vulnerabi...

9.8CVSS7.3AI score0.00711EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/29 12:0 a.m.9 views

PT-2023-22332 · Sourcecodester · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Faculty Evaluation System version 1.0 Description: A critical issue has been found in the SourceCodester Faculty Evaluation System, affecting some unknown functionality of the file "index.php?page=edit user". The manipulation o...

9.8CVSS8.4AI score0.00711EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2023/05/29 12:0 a.m.8 views

Faculty Evaluation System SQL注入漏洞

Faculty Evaluation System is a faculty evaluation system by Carlo Montero Personal Developer. SourceCodester Faculty Evaluation System version 1.0 suffers from a SQL injection vulnerability that stems from a problem with the file index.php?page=edituser, which can be exploited by an attacker to...

9.8CVSS6AI score0.00711EPSS
SaveExploits1References5
NVD
NVD
added 2023/05/26 4:15 p.m.32 views

CVE-2023-33440

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=saveuser...

7.2CVSS7.3AI score0.14507EPSS
SaveExploits4References2
OSV
OSV
added 2023/05/26 4:15 p.m.7 views

CVE-2023-33440

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=saveuser...

7.2CVSS6.3AI score0.14507EPSS
SaveExploits4References2
ATTACKERKB
ATTACKERKB
added 2023/05/26 4:15 p.m.6 views

CVE-2023-33440

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=saveuser...

7.2CVSS6.4AI score0.14507EPSS
SaveExploits4References4
ATTACKERKB
ATTACKERKB
added 2023/05/26 4:15 p.m.6 views

CVE-2023-33439

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/managetask.php?id=...

7.2CVSS5.8AI score0.03307EPSS
SaveExploits1References3
OSV
OSV
added 2023/05/26 4:15 p.m.8 views

CVE-2023-33439

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/managetask.php?id=...

7.2CVSS5.8AI score0.03307EPSS
SaveExploits1References1
Prion
Prion
added 2023/05/26 4:15 p.m.30 views

Sql injection

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/managetask.php?id=...

5.8CVSS7.3AI score0.03307EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2023/05/26 4:15 p.m.32 views

Code injection

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=saveuser...

5.8CVSS7.2AI score0.14507EPSS
SaveExploits4References2Affected Software1
CVE
CVE
added 2023/05/26 12:0 a.m.169 views

CVE-2023-33439

Summary of CVE-2023-33439 : Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection through the endpoint /eval/admin/manage_task.php?id=. The connected nuclei template confirms the vulnerable component/parameter and notes a high-severity impact: arbitrary SQL execution that c...

7.2CVSS7.3AI score0.03307EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/05/26 12:0 a.m.11 views

Faculty Evaluation System SQL注入漏洞

Faculty Evaluation System is a faculty evaluation system. A SQL injection vulnerability exists in Faculty Evaluation System, which can be exploited by an attacker to directly manipulate the database by constructing malicious query statements to obtain sensitive information or perform arbitrary...

7.2CVSS7.7AI score0.03307EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/05/26 12:0 a.m.12 views

CVE-2023-33439

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/managetask.php?id=...

7.3AI score0.03307EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/05/26 12:0 a.m.41 views

CVE-2023-33440

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=saveuser...

7.5AI score0.14507EPSS
SaveExploits4References2
CNNVD
CNNVD
added 2023/05/26 12:0 a.m.9 views

Faculty Evaluation System 安全漏洞

Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A security vulnerability exists in Sourcecodester Faculty Evaluation System v1.0, which originates from an attack that can execute arbitrary code via /eval/ajax.php?action=saveuser...

7.2CVSS7.5AI score0.14507EPSS
SaveExploits4References4
Cvelist
Cvelist
added 2023/05/26 12:0 a.m.23 views

CVE-2023-33439

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/managetask.php?id=...

7.6AI score0.03307EPSS
SaveExploits1References1
Rows per page
Query Builder