Open Faculty Evaluation System Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Open Faculty Evaluation System Project records in CISA KEV

No Open Faculty Evaluation System Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2018-13274 CVE-2018-18758 · GHSA-g9x3-9vfg-j4xr

MEDIUM 47

Open Faculty Evaluation System 7 for PHP 7 allows submit_feedback.php SQL Injection, a different vulnerability than CVE-2018-18757.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02338 Published 2019-06-19 No fix listed CWE-89

TI-2018-13273 CVE-2018-18757 · GHSA-vg7f-w97j-m6x9

MEDIUM 47

Open Faculty Evaluation System 5.6 for PHP 5.6 allows submit_feedback.php SQL Injection, a different vulnerability than CVE-2018-18758.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02338 Published 2019-06-19 No fix listed CWE-89