CVE Catalog
CVE-2023-33440
HighCVSS 7.2Exploitation Probability (EPSS)
Very high risk14.51%
96th percentile - higher than 96% of all known CVEs
Summary
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_user.
Risk Assessment
Exploitation of this vulnerability could lead to system takeover, posing a serious threat to the organization's data security.
Recommendation
It is recommended to update the system to the latest version and implement appropriate security measures to mitigate the risk of this vulnerability.
Original NVD description (English source)
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_user.

