VendorsFaculty Evaluation System Projectfaculty_evaluation_system1.0
Vulnerabilities

Faculty Evaluation System Project Faculty Evaluation System 1.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

14CVEs
CVE-2023-2366
SourceCodester Faculty Evaluation System sql injection
Published 2023-04-28 · Modified
9.8EPSS 0.008
CVE-2023-2365
SourceCodester Faculty Evaluation System sql injection
Published 2023-04-28 · Modified
9.8EPSS 0.007
CVE-2023-2367
SourceCodester Faculty Evaluation System manage_academic.php sql injection
Published 2023-04-28 · Modified
9.8EPSS 0.007
CVE-2023-2368
SourceCodester Faculty Evaluation System sql injection
Published 2023-04-28 · Modified
9.8EPSS 0.007
CVE-2023-2369
SourceCodester Faculty Evaluation System manage_restriction.php sql injection
Published 2023-04-28 · Modified
9.8EPSS 0.007
CVE-2023-2962
SourceCodester Faculty Evaluation System sql injection
Published 2023-05-29 · Modified
9.8EPSS 0.007
CVE-2023-33440
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_user.
Published 2023-05-26 · Modified
7.21 PoCEPSS 0.145
CVE-2023-33439
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_task.php?id=.
Published 2023-05-26 · Modified
7.2EPSS 0.033
CVE-2023-33569
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via ip/eval/ajax.php?action=update_user.
Published 2023-06-06 · Modified
7.2EPSS 0.011
CVE-2023-31844
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_subject.php?id=.
Published 2023-05-15 · Modified
7.2EPSS 0.008
CVE-2023-31845
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_class.php?id=.
Published 2023-05-15 · Modified
7.2EPSS 0.008
CVE-2023-31842
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/index.php?page=edit_faculty&id=.
Published 2023-05-15 · Modified
7.2EPSS 0.008
CVE-2023-31843
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/view_faculty.php?id=.
Published 2023-05-15 · Modified
7.2EPSS 0.008
CVE-2023-36118
Cross Site Scripting vulnerability in Faculty Evaulation System using PHP/MySQLi v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the page parameter.
Published 2023-08-01 · Analyzed
5.4EPSS 0.007