PT-2023-23486 · Sourcecodester · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Faculty Evaluation System version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/eval/admin/manage class.php?id=" endpoint. The id variable is vulnerable to injection attacks. No...

Faculty Evaluation System SQL注入漏洞

Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A security vulnerability exists in version v1.0 of the Sourcecodester Faculty Evaluation System, which stems from an SQL injection in /eval/index.php?page=editfaculty&id=...

Faculty Evaluation System SQL注入漏洞

Faculty Evaluation System is a faculty evaluation system. Faculty Evaluation System v1.0 suffers from a SQL injection vulnerability, which originates from a SQL injection in /eval/admin/viewfaculty.php?id. An attacker can exploit this vulnerability by inserting SQL commands into the query string ...

CVE-2023-31844

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/managesubject.php?id=...

CVE-2023-31845

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manageclass.php?id=...

Faculty Evaluation System SQL注入漏洞

Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A security vulnerability exists in version v1.0 of the Sourcecodester Faculty Evaluation System, which originates in /eval/admin/manageclass.php?id=Existence of SQL injection...

CVE-2023-31842

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/index.php?page=editfaculty&id=...

CVE-2023-31843

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/viewfaculty.php?id=...

CVE-2023-31844

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/managesubject.php?id=...

PT-2023-23483 · Sourcecodester · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Faculty Evaluation System version 1.0 Description: The issue concerns SQL Injection vulnerability via the "/eval/index.php?page=edit faculty&id=" endpoint. This allows for potential exploitation by injecting malicious SQL code...

CVE-2023-31842

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/index.php?page=editfaculty&id=...

CVE-2023-31842

CVE-2023-31842 affects Sourcecodester Faculty Evaluation System v1.0. The vulnerability is an SQL Injection in the endpoint /eval/index.php?page=edit_faculty&id=, allowing injection via that parameter. The Red Hat/NVD entries corroborate the same issue. CVSSv3.1 metrics indicate a High impact ( C...

CVE-2023-31845

CVE-2023-31845 affects Sourcecodester Faculty Evaluation System v1.0. The vulnerability is a SQL Injection in the endpoint /eval/admin/manage_class.php?id= (unsanitized id parameter). The CVSS 3.1 vector indicates a NETWORK attack, with PR:High , UI:None , and impact on all three security goals (...

CVE-2023-31844

CVE-2023-31844 affects Sourcecodester Faculty Evaluation System v1.0. The vulnerability is an SQL Injection in /eval/admin/manage_subject.php?id=, as reported across multiple sources (NVD, Red Hat, CNNVD, CVE records). CVSS v3.1: Base score 7.2 (HIGH), vectors: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H...

CVE-2023-31843

CVE-2023-31843 affects Sourcecodester Faculty Evaluation System v1.0, where the vulnerability is a SQL injection in the endpoint /eval/admin/view_faculty.php?id= (input parameter). The Red Hat/CNVD/CNNVD and other connected records confirm the same flaw across multiple sources. The underlying iss...

Faculty Evaluation System SQL注入漏洞

Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A security vulnerability exists in version v1.0 of the Sourcecodester Faculty Evaluation System, which originates in /eval/admin/managesubject.php?id=Existence of SQL injection...

CVE-2023-2368

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file index.php?page=managequestionnaire. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. Th...

CVE-2023-2367

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/manageacademic.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2023-2368

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file index.php?page=managequestionnaire. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. Th...

CVE-2023-2369

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/managerestriction.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The explo...