CVE-2023-31845

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manageclass.php?id=...

EUVD-2023-34408

Malicious code in bioql PyPI...

EUVD-2023-33855

Malicious code in bioql PyPI...

EUVD-2023-33858

Malicious code in bioql PyPI...

CVE-2023-33439

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/managetask.php?id=...

CVE-2023-2366

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ajax.php?action=deleteclass. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

CVE-2023-33569

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via ip/eval/ajax.php?action=updateuser...

Code injection

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via ip/eval/ajax.php?action=updateuser...

CVE-2023-33569: Unrestricted Upload of File with Dangerous Type

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via ip/eval/ajax.php?action=updateuser...

CVE-2023-2962

A vulnerability, which was classified as critical, has been found in SourceCodester Faculty Evaluation System 1.0. Affected by this issue is some unknown functionality of the file index.php?page=edituser. The manipulation of the argument id leads to sql injection. The attack may be launched...

CVE-2023-2962: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Faculty Evaluation System 1.0. Affected by this issue is some unknown functionality of the file index.php?page=edituser. The manipulation of the argument id leads to sql injection. The attack may be launched...

CVE-2023-33440: Improper Control of Generation of Code

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=saveuser...

CVE-2023-33439

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/managetask.php?id=...

PT-2023-24344 · Unknown · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Faculty Evaluation System version 1.0 Description: The issue allows for arbitrary code execution via the "/eval/ajax.php?action=save user" API endpoint. This could potentially lead to unauthorized access and control of the...

CVE-2023-33439: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/managetask.php?id=...

CVE-2023-31843

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/viewfaculty.php?id=...

Sql injection

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/viewfaculty.php?id=...

PT-2023-23486 · Sourcecodester · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Faculty Evaluation System version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/eval/admin/manage class.php?id=" endpoint. The id variable is vulnerable to injection attacks. No...

PT-2023-23485

Name of the Vulnerable Software and Affected Versions Sourcecodester Faculty Evaluation System version 1.0 Description The issue concerns SQL Injection via the "/eval/admin/manage subject.php?id=" endpoint. This allows for potential manipulation of database queries by injecting malicious SQL code...

CVE-2023-31845: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manageclass.php?id=...