Faculty Evaluation System Project

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Faculty Evaluation System Project records in CISA KEV

No Faculty Evaluation System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Faculty Evaluation System 14 records HIGH

Records

14 records

TI-2023-02224 CVE-2023-2369 · GHSA-p4hh-gjjx-wjgg

SourceCodester Faculty Evaluation System manage_restriction.php sql injection

HIGH 75

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00722 Published 2023-04-28 No fix listed CWE-89

TI-2023-02222 CVE-2023-2367 · GHSA-jg4q-qmf8-rvm7

SourceCodester Faculty Evaluation System manage_academic.php sql injection

HIGH 75

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00722 Published 2023-04-28 No fix listed CWE-89

TI-2023-16533 CVE-2023-33440 · GHSA-966v-xccm-p63c

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution…

HIGH 67

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.14507 Published 2023-05-26 No fix listed CWE-94

TI-2023-16532 CVE-2023-33439 · GHSA-p3rx-3f5f-p375

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_task.php?id=.

HIGH 67

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_task.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03307 Published 2023-05-26 No fix listed CWE-89

TI-2023-15236 CVE-2023-31845 · GHSA-2884-65gj-953q

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_class.php?id=.

HIGH 67

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_class.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00837 Published 2023-05-15 No fix listed CWE-89

TI-2023-18121 CVE-2023-36118 · GHSA-x8qh-xq3w-x7fx

Cross Site Scripting vulnerability in Faculty Evaulation System using PHP/MySQLi v.1.0…

MEDIUM 58

Cross Site Scripting vulnerability in Faculty Evaulation System using PHP/MySQLi v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the page parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0074 Published 2023-08-01 No fix listed CWE-79

TI-2023-02777 CVE-2023-2962 · GHSA-mwhw-p6ch-6frr

SourceCodester Faculty Evaluation System sql injection

MEDIUM 43

A vulnerability, which was classified as critical, has been found in SourceCodester Faculty Evaluation System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00711 Published 2023-05-29 No fix listed CWE-89

TI-2023-02223 CVE-2023-2368 · GHSA-wgf6-42x8-3826

SourceCodester Faculty Evaluation System sql injection

MEDIUM 43

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00722 Published 2023-04-28 No fix listed CWE-89

TI-2023-02221 CVE-2023-2366 · GHSA-mc8r-q9m6-x988

SourceCodester Faculty Evaluation System sql injection

MEDIUM 43

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00791 Published 2023-04-28 No fix listed CWE-89

TI-2023-02220 CVE-2023-2365 · GHSA-77pj-58vg-f3c8

SourceCodester Faculty Evaluation System sql injection

MEDIUM 43

A vulnerability has been found in SourceCodester Faculty Evaluation System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00737 Published 2023-04-28 No fix listed CWE-89

TI-2023-16588 CVE-2023-33569 · GHSA-vg6r-6h68-4g26

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution…

LOW 36

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via ip/eval/ajax.php?action=update_user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01112 Published 2023-06-06 No fix listed CWE-434

TI-2023-15235 CVE-2023-31844 · GHSA-h9p6-43jj-74m2

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_subject.php?id=.

LOW 35

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_subject.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00837 Published 2023-05-15 No fix listed CWE-89

TI-2023-15234 CVE-2023-31843 · GHSA-hhv9-534v-rpfp

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/view_faculty.php?id=.

LOW 35

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/view_faculty.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00756 Published 2023-05-15 No fix listed CWE-89

TI-2023-15233 CVE-2023-31842 · GHSA-hwxq-46rv-xcwm

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/index.php?page=edit_faculty&id=.

LOW 35

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/index.php?page=edit_faculty&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00756 Published 2023-05-15 No fix listed CWE-89

Open these records in search →

Critical	6
High	7
Medium	1
Low	0
No CVSS	0