13 matches found
EUVD-2018-10474
Malware in sbrugna...
EUVD-2018-10473
Malware in sbrugna...
CVE-2018-18758
Open Faculty Evaluation System 7 for PHP 7 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18757...
CVE-2018-18757
Open Faculty Evaluation System 5.6 for PHP 5.6 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18758...
CVE-2018-18758
Open Faculty Evaluation System 7 for PHP 7 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18757...
CVE-2018-18758
CVE-2018-18758 affects Open Faculty Evaluation System (OFES) version 7 on PHP 7. The vulnerability is a SQL Injection in submit_feedback.php caused by lack of validation of externally supplied SQL statements. Related CNVD entries also cover OFES 5.6 (PHP 5.6) and OFES 7, indicating the same issue...
CVE-2018-18757: Improper Neutralization of Special Elements used in an SQL Command
Open Faculty Evaluation System 5.6 for PHP 5.6 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18758...
PT-2019-9628
Name of the Vulnerable Software and Affected Versions Open Faculty Evaluation System 7 for PHP 7 Description The issue allows for SQL Injection in the submit feedback.php file. Recommendations For Open Faculty Evaluation System 7 for PHP 7, update the submit feedback.php file to prevent SQL...
PT-2019-9627
Name of the Vulnerable Software and Affected Versions Open Faculty Evaluation System version 5.6 Description The issue allows for SQL Injection in the submit feedback.php file. Recommendations For Open Faculty Evaluation System version 5.6, update to a version that fixes the SQL Injection issue i...
CVE-2018-18758: Improper Neutralization of Special Elements used in an SQL Command
Open Faculty Evaluation System 7 for PHP 7 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18757...
Open Faculty Evaluation System 7 - batch_name SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Open Faculty Evaluation System 7 - 'batchname' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://openfacultyeval.sourceforge.io/ Software Link:...
Open Faculty Evaluation System 7 SQL Injection
Exploit Title: Open Faculty Evaluation System 7 - 'batchname' SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://openfacultyeval.sourceforge.io/ Software Link: https://sourceforge.net/projects/openfacultyeval/files/feedbackphp7.zip/download Version: Php...
Open Faculty Evaluation System 5.6 - batch_name SQL Injection
Open Faculty Evaluation System 5.6 - batchname SQL Injection Exploit Title: Open Faculty Evaluation System 5.6 - 'batchname' SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://openfacultyeval.sourceforge.io/ Software Link:...