CVE-2023-31843

Name of the Vulnerable Software and Affected Versions Sourcecodester Faculty Evaluation System version 1.0

Description The issue is related to SQL Injection, which can be exploited via the "/eval/admin/view faculty.php?id=" endpoint. This allows for potential manipulation of database queries.

Recommendations For Sourcecodester Faculty Evaluation System version 1.0, consider restricting access to the "/eval/admin/view faculty.php" endpoint until a patch is available. As a temporary workaround, avoid using the id parameter in the affected endpoint to minimize the risk of exploitation.