Priority MEDIUM 58
Cross Site Scripting vulnerability in Faculty Evaulation System using PHP/MySQLi v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the page parameter.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0074 · Published 2023-08-01 · No fix listed CWE-79
Priority LOW 36
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via ip/eval/ajax.php?action=update_user.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01112 · Published 2023-06-06 · No fix listed CWE-434
Priority MEDIUM 43
A vulnerability, which was classified as critical, has been found in SourceCodester Faculty Evaluation System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00711 · Published 2023-05-29 · No fix listed CWE-89
Priority HIGH 67
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_user.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.14507 · Published 2023-05-26 · No fix listed CWE-94
Priority HIGH 67
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_task.php?id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03307 · Published 2023-05-26 · No fix listed CWE-89
Priority HIGH 67
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_class.php?id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00837 · Published 2023-05-15 · No fix listed CWE-89
Priority LOW 35
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_subject.php?id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00837 · Published 2023-05-15 · No fix listed CWE-89
Priority LOW 35
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/view_faculty.php?id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00756 · Published 2023-05-15 · No fix listed CWE-89
Priority LOW 35
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/index.php?page=edit_faculty&id=.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00756 · Published 2023-05-15 · No fix listed CWE-89
Priority HIGH 75
A vulnerability was found in SourceCodester Faculty Evaluation System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00722 · Published 2023-04-28 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability was found in SourceCodester Faculty Evaluation System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00722 · Published 2023-04-28 · No fix listed CWE-89
Priority HIGH 75
A vulnerability was found in SourceCodester Faculty Evaluation System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00722 · Published 2023-04-28 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability was found in SourceCodester Faculty Evaluation System 1.0 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00791 · Published 2023-04-28 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability has been found in SourceCodester Faculty Evaluation System 1.0 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00737 · Published 2023-04-28 · No fix listed CWE-89
THREATIST.IORead the docs