cve/2023/CVE-2023-33440.md

CVE-2023-33440

Description

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_user.

POC

Reference

• http://packetstormsecurity.com/files/172672/Faculty-Evaluation-System-1.0-Shell-Upload.html

Github

• https://github.com/1337kid/Exploits
• https://github.com/Alexander-Gan/Exploits