Lucene search
+L

137 matches found

Positive Technologies
Positive Technologies
added 2023/04/28 12:0 a.m.7 views

PT-2023-19113 · Sourcecodester · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Faculty Evaluation System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /admin/manage academic.php. The manipulation of the id argument leads to sql injection,...

9.8CVSS5.3AI score0.00722EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/04/28 12:0 a.m.6 views

Faculty Evaluation System SQL注入漏洞

Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Faculty Evaluation System version 1.0, which stems from an SQL injection issue in the id parameter of ajax.php?action=deletesubject...

9.8CVSS7.2AI score0.00737EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/28 12:0 a.m.8 views

PT-2023-19102 · Sourcecodester · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Faculty Evaluation System version 1.0 Description: A critical issue has been found in the SourceCodester Faculty Evaluation System, affecting an unknown functionality of the file "ajax.php?action=delete subject". The manipulati...

9.8CVSS7.8AI score0.00737EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/04/28 12:0 a.m.7 views

Faculty Evaluation System SQL注入漏洞

Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Faculty Evaluation System version 1.0, which stems from an SQL injection issue in the id parameter of /admin/manageacademic.php...

9.8CVSS6AI score0.00722EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/28 12:0 a.m.28 views

PT-2023-19134 · Sourcecodester · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Faculty Evaluation System version 1.0 Description: A critical issue affects the processing of the file admin/manage restriction.php, where the manipulation of the id argument leads to sql injection. The attack can be initiated...

9.8CVSS5.5AI score0.00722EPSS
SaveExploits1References6
CNVD
CNVD
added 2019/06/20 12:0 a.m.3 views

Open Faculty Evaluation System SQL Injection Vulnerability (CNVD-2019-18736)

Open Faculty Evaluation System is a PHP and MySQL based teacher evaluation system. The system provides Web-based graphical reports and Excel file reports, and supports student subject ratings for teachers. A SQL injection vulnerability exists in the submitfeedback.php file in Open Faculty...

9.8CVSS8.2AI score0.02338EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/06/20 12:0 a.m.4 views

Open Faculty Evaluation System SQL Injection Vulnerability

Open Faculty Evaluation System is a PHP and MySQL based teacher evaluation system. The system provides Web-based graphical reports and Excel file reports, and supports student subject ratings for teachers. A SQL injection vulnerability exists in the submitfeedback.php file in Open Faculty...

9.8CVSS8.2AI score0.02338EPSS
SaveExploits1References1
OSV
OSV
added 2019/06/19 4:15 p.m.3 views

CVE-2018-18757

Open Faculty Evaluation System 5.6 for PHP 5.6 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18758...

9.8CVSS5.8AI score0.02338EPSS
SaveExploits1References2
NVD
NVD
added 2019/06/19 4:15 p.m.25 views

CVE-2018-18758

Open Faculty Evaluation System 7 for PHP 7 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18757...

9.8CVSS9.8AI score0.02338EPSS
SaveExploits1References2
OSV
OSV
added 2019/06/19 4:15 p.m.6 views

CVE-2018-18758

Open Faculty Evaluation System 7 for PHP 7 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18757...

9.8CVSS5.8AI score0.02338EPSS
SaveExploits1References2
Prion
Prion
added 2019/06/19 4:15 p.m.22 views

Sql injection

Open Faculty Evaluation System 5.6 for PHP 5.6 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18758...

7.5CVSS9.8AI score0.02338EPSS
SaveExploits2References2Affected Software1
CVE
CVE
added 2019/06/19 3:40 p.m.78 views

CVE-2018-18757

Open Faculty Evaluation System 5.6 for PHP 5.6 contains an SQL Injection in submit_feedback.php. The issue stems from lack of validation of externally supplied SQL statements, enabling an attacker to execute arbitrary SQL. This vulnerability is separate from CVE-2018-18758 and has multiple CNVD/N...

9.8CVSS9.7AI score0.02338EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2019/06/19 3:30 p.m.78 views

CVE-2018-18758

CVE-2018-18758 affects Open Faculty Evaluation System (OFES) version 7 on PHP 7. The vulnerability is a SQL Injection in submit_feedback.php caused by lack of validation of externally supplied SQL statements. Related CNVD entries also cover OFES 5.6 (PHP 5.6) and OFES 7, indicating the same issue...

9.8CVSS9.7AI score0.02338EPSS
SaveExploits1References2Affected Software1
0day.today
0day.today
added 2018/10/31 12:0 a.m.44 views

Open Faculty Evaluation System 7 - batch_name SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Open Faculty Evaluation System 7 - 'batchname' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://openfacultyeval.sourceforge.io/ Software Link:...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2018/10/29 12:0 a.m.31 views

Open Faculty Evaluation System 7 SQL Injection

Exploit Title: Open Faculty Evaluation System 7 - 'batchname' SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://openfacultyeval.sourceforge.io/ Software Link: https://sourceforge.net/projects/openfacultyeval/files/feedbackphp7.zip/download Version: Php...

0.1AI score
SaveExploits0
exploitpack
exploitpack
added 2018/10/29 12:0 a.m.34 views

Open Faculty Evaluation System 5.6 - batch_name SQL Injection

Open Faculty Evaluation System 5.6 - batchname SQL Injection Exploit Title: Open Faculty Evaluation System 5.6 - 'batchname' SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://openfacultyeval.sourceforge.io/ Software Link:...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2018/10/29 12:0 a.m.28 views

Open Faculty Evaluation System 5.6 SQL Injection

Exploit Title: Open Faculty Evaluation System 5.6 - 'batchname' SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://openfacultyeval.sourceforge.io/ Software Link: https://sourceforge.net/projects/openfacultyeval/files/feedbackphp56.zip/download Version:...

0.1AI score
SaveExploits0
Rows per page
Query Builder