CVE Catalog
CVE-2023-33439
HighCVSS 7.2Exploitation Probability (EPSS)
High risk3.31%
87th percentile - higher than 87% of all known CVEs
Summary
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via the 'id' parameter in /eval/admin/manage_task.php.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the database, jeopardizing the confidentiality of the organization's data.
Recommendation
It is recommended to implement input validation and use prepared statements to secure the application against SQL Injection attacks.
Other vulnerabilities in Sourcecodester Faculty Evaluation System v1.0
See allOriginal NVD description (English source)
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_task.php?id=.