CVE-2023-36118

Description

Cross Site Scripting vulnerability in Faculty Evaulation System using PHP/MySQLi v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the page parameter.

Reserved 2023-06-21 | Published 2023-08-01 | Updated 2024-10-17 | Assigner mitre

References

packetstormsecurity.com/...tion-System-1.0-Shell-Upload.html

hackmd.io/@SY-T/Hy6HvwxPn

github.com/...ue/blob/main/Faculty Evaluation System v1.0.md

www.chtsecurity.com/.../4ffbe017-70e1-4789-bfe6-4d6fb0d1a0b7

www.chtsecurity.com/.../5282e0af-7c45-43b0-9869-9becee7d6d70

cve.org (CVE-2023-36118)

nvd.nist.gov (CVE-2023-36118)

Download JSON