CVE-2023-33440

CVE-2023-33440 affects Sourcecodester Faculty Evaluation System v1.0. The vulnerability is an arbitrary code execution via the endpoint /eval/ajax.php?action=save_user. CVSS v3.1 metrics indicate HIGH severity (7.2) with NETWORK attack vector, low complexity, and no user interaction required, gra...

CVE-2023-33439

Summary of CVE-2023-33439 : Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection through the endpoint /eval/admin/manage_task.php?id=. The connected nuclei template confirms the vulnerable component/parameter and notes a high-severity impact: arbitrary SQL execution that c...

CVE-2023-33569

CVE-2023-33569 affects Sourcecodester Faculty Evaluation System v1.0. The vulnerability is an arbitrary code execution via the endpoint ip/eval/ajax.php?action=update_user (or update user per sources). Affected component is the eval/ajax handler; root cause is not detailed beyond code execution r...

CVE-2023-31843

CVE-2023-31843 affects Sourcecodester Faculty Evaluation System v1.0, where the vulnerability is a SQL injection in the endpoint /eval/admin/view_faculty.php?id= (input parameter). The Red Hat/CNVD/CNNVD and other connected records confirm the same flaw across multiple sources. The underlying iss...

CVE-2023-31842

CVE-2023-31842 affects Sourcecodester Faculty Evaluation System v1.0. The vulnerability is an SQL Injection in the endpoint /eval/index.php?page=edit_faculty&id=, allowing injection via that parameter. The Red Hat/NVD entries corroborate the same issue. CVSSv3.1 metrics indicate a High impact ( C...

CVE-2023-31844

CVE-2023-31844 affects Sourcecodester Faculty Evaluation System v1.0. The vulnerability is an SQL Injection in /eval/admin/manage_subject.php?id=, as reported across multiple sources (NVD, Red Hat, CNNVD, CVE records). CVSS v3.1: Base score 7.2 (HIGH), vectors: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H...

CVE-2023-31845

CVE-2023-31845 affects Sourcecodester Faculty Evaluation System v1.0. The vulnerability is a SQL Injection in the endpoint /eval/admin/manage_class.php?id= (unsanitized id parameter). The CVSS 3.1 vector indicates a NETWORK attack, with PR:High , UI:None , and impact on all three security goals (...