CVE-2018-18757

Open Faculty Evaluation System 5.6 for PHP 5.6 allows submit_feedback.php SQL Injection, a different vulnerability than CVE-2018-18758.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-06-19

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Open Faculty Evaluation System (Open Faculty Evaluation System Project)

References

• https://www.exploit-db.com/author/?a=8844
• https://www.exploit-db.com/exploits/45703