CVE Catalog

CVE-2023-33440

HighCVSS 7.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
14.51%

96th percentile - higher than 96% of all known CVEs

Summary

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_user.

Risk Assessment

Exploitation of this vulnerability could lead to system takeover, posing a serious threat to the organization's data security.

Recommendation

It is recommended to update the system to the latest version and implement appropriate security measures to mitigate the risk of this vulnerability.

Original NVD description (English source)

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_user.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS