Launchpad.net

CVE 2023-33440

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_user.

See the CVE page on Mitre.org for more details.