Open Faculty Evaluation System Project Open Faculty Evaluation System — known CVE vulnerabilities

Every CVE whose affected-product data names Open Faculty Evaluation System Project Open Faculty Evaluation System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2018-18757 — CVSS 9.8 (critical): Open Faculty Evaluation System 5.6 for PHP 5.6 allows submit_feedback.php SQL Injection, a different vulnerability than CVE-2018-18758.
• CVE-2018-18758 — CVSS 9.8 (critical): Open Faculty Evaluation System 7 for PHP 7 allows submit_feedback.php SQL Injection, a different vulnerability than CVE-2018-18757.