EUVD-2018-10473

Malware in sbrugna...

EUVD-2018-10474

Malware in sbrugna...

CVE-2018-18758

Open Faculty Evaluation System 7 for PHP 7 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18757...

CVE-2018-18757

Open Faculty Evaluation System 5.6 for PHP 5.6 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18758...

CVE-2018-18758

Open Faculty Evaluation System 7 for PHP 7 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18757...

CVE-2018-18758

CVE-2018-18758 affects Open Faculty Evaluation System (OFES) version 7 on PHP 7. The vulnerability is a SQL Injection in submit_feedback.php caused by lack of validation of externally supplied SQL statements. Related CNVD entries also cover OFES 5.6 (PHP 5.6) and OFES 7, indicating the same issue...

CVE-2018-18757: Improper Neutralization of Special Elements used in an SQL Command

Open Faculty Evaluation System 5.6 for PHP 5.6 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18758...

CVE-2018-18758: Improper Neutralization of Special Elements used in an SQL Command

Open Faculty Evaluation System 7 for PHP 7 allows submitfeedback.php SQL Injection, a different vulnerability than CVE-2018-18757...

Open Faculty Evaluation System 7 - batch_name SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Open Faculty Evaluation System 7 - 'batchname' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://openfacultyeval.sourceforge.io/ Software Link:...

Open Faculty Evaluation System 7 SQL Injection

Exploit Title: Open Faculty Evaluation System 7 - 'batchname' SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://openfacultyeval.sourceforge.io/ Software Link: https://sourceforge.net/projects/openfacultyeval/files/feedbackphp7.zip/download Version: Php...

Open Faculty Evaluation System 5.6 - batch_name SQL Injection

Open Faculty Evaluation System 5.6 - batchname SQL Injection Exploit Title: Open Faculty Evaluation System 5.6 - 'batchname' SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://openfacultyeval.sourceforge.io/ Software Link:...