CVE-2018-18758

Open Faculty Evaluation System 7 for PHP 7 allows submit_feedback.php SQL Injection, a different vulnerability than CVE-2018-18757.

• CWE-89

• https://www.exploit-db.com/author/?a=8844Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/45707Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/author/?a=8844Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/45707Exploit, Third Party Advisory, VDB Entry

Published

Jun 19, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18752Webiness Inventory 2.3 suffers from an Arbitrary File upload…
• CVE-2018-18753Typecho V1.1 allows remote attackers to send shell commands …
• CVE-2018-18754ZyXEL VMG3312-B10B 1.00(AAPP.7) devices have a backdoor root…
• CVE-2018-18755K-iwi Framework 1775 has SQL Injection via the admin/user/gr…9.8
• CVE-2018-18756Local Server 1.0.9 has a Buffer Overflow via crafted data on…
• CVE-2018-18757Open Faculty Evaluation System 5.6 for PHP 5.6 allows submit…
• CVE-2018-18759Modbus Slave 7.0.0 in modbus tools has a Buffer Overflow.
• CVE-2018-1876IBM Robotic Process Automation with Automation Anywhere 11 c…6.2
• CVE-2018-18760RhinOS 3.0 build 1190 allows CSRF.
• CVE-2018-18761SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL]…9.8
• CVE-2018-18762SaltOS 3.1 r8126 contains a database download vulnerability.
• CVE-2018-18763SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuar…