CVE-2023-51800

CVE-2023-51800 School Fees Management System v1.0 - 多个跨站脚本（XSS）漏洞 描述 ：School Fees Management System v1.0 存在多个跨站脚本（XSS）漏洞。 受影响的产品版本 ：School Fees Management System v1.0 CVE 作者 ：Geraldo Alcântara 日期 ：28/11/2023 确认日期 ：10/12/2023 CVE ：CVE-2023-51800 CVE 链接 ：https://vulners.com/cve/CVE-2023-51800 NVD 链...

CVE-2023-49982

CVE-2023-49982 School Fees Management System v1.0 - Control de acceso incorrecto - Escalada de privilegios Descripción : El control de acceso incorrecto en School Fees Management System v1.0 permite a los atacantes escalar privilegios y realizar acciones administrativas, incluyendo agregar y...

Code-Projects School Fees Payment System 1.0 - SQL Injection

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2023-49984

CVE-2023-49984 School Fees Management System v1.0 - 跨站脚本（XSS）漏洞，位于 "/management/settings" 的 "name" 字段/参数 描述 ：School Fees Management System v1.0 的 "/management/settings" 组件中存在跨站脚本（XSS）漏洞，允许攻击者通过向 name 参数注入精心构造的有效载荷来执行任意 Web 脚本或 HTML。 受影响的产品版本 ：School Fees Management System v1.0 CVE 作者 ：Geraldo...

CVE-2023-49985

CVE-2023-49985 School Fees Management System v1.0 - Vulnerabilidad de Cross-Site Scripting XSS en el parámetro "cname" en "newclass" Descripción : Una vulnerabilidad de cross-site scripting XSS en el componente "newclass" de School Fees Management System v1.0 permite a los atacantes ejecutar...

CVE-2023-49983

CVE-2023-49983 School Fees Management System v1.0 - Vulnerabilidad de Cross-Site Scripting XSS en el campo/parámetro "name" en "/management/class" Descripción : Una vulnerabilidad de cross-site scripting XSS en el componente "/management/class" de School Fees Management System v1.0 permite a los...

CVE-2023-49987

CVE-2023-49987 School Fees Management System v1.0 - Vulnerabilidad de Cross-Site Scripting XSS en el parámetro "tname" en "newterm" Descripción : Una vulnerabilidad de Cross-Site Scripting XSS en el componente “newterm” de School Fees Management System 1.0 permite a los atacantes ejecutar scripts...

CVE-2023-49981

CVE-2023-49981 School Fees Management System v1.0 - Control de acceso incorrecto - Listado de directorio Descripción : Una vulnerabilidad de listado de directorio en School Fees Management System v1.0 permite a los atacantes enumerar directorios y archivos sensibles dentro de la aplicación sin...

CVE-2023-49986

CVE-2023-49986 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "name" parameter on "addnewparent" Descripción : Una vulnerabilidad de cross-site scripting XSS en el componente “addnewparent” de School Fees Management System 1.0 permite a los atacantes ejecutar scrip...

CVE-2026-63628: Improper Input Validation

mppx is a TypeScript interface for machine payments protocol. Prior to 0.8.2, the fee-payer cosigning path in src/tempo/internal/fee-payer.ts copied a client-supplied accesslist from a 0x78 FeePayerEnvelope without validating its length or contents. Because EIP-2930 access-list entries consume...

PT-2026-96975

Name of the Vulnerable Software and Affected Versions mppx versions prior to 0.8.2 Description The fee-payer cosigning path in src/tempo/internal/fee-payer.ts copies a client-supplied access list from a 0x78 FeePayerEnvelope without validating its length or contents. EIP-2930 access-list entries...

EUVD-2026-70527

Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment PoC+ consensus algorithm. Prior to version 3.9.9, an integer overflow in BlockServiceImpl.applyBlock allowed a miner to receive an arbitrarily inflated block reward by crafting a block with a negative...

PT-2026-85078

Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment PoC+ consensus algorithm. Prior to version 3.9.9, an integer overflow in BlockServiceImpl.applyBlock allowed a miner to receive an arbitrarily inflated block reward by crafting a block with a negative...

CVE-2026-56048

Unauthenticated Insecure Direct Object References IDOR in Payment Gateway Based Fees and Discounts for WooCommerce = 3.0.0 versions...

EUVD-2026-39709

Unauthenticated Insecure Direct Object References IDOR in Payment Gateway Based Fees and Discounts for WooCommerce = 3.0.0 versions...

CVE-2026-56048 WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 3.0.0 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Payment Gateway Based Fees and Discounts for WooCommerce = 3.0.0 versions...

CVE-2026-56048 WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 3.0.0 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Payment Gateway Based Fees and Discounts for WooCommerce = 3.0.0 versions...

CVE-2026-56048

Summary: CVE-2026-56048 concerns the WordPress plugin “Payment Gateway Based Fees and Discounts for WooCommerce” (versions ≤ 3.0.0). The vulnerability is described as an unauthenticated insecure direct object reference (IDOR). The connected documents confirm the affected product and root cause (I...

PT-2026-52762

Name of the Vulnerable Software and Affected Versions Payment Gateway Based Fees and Discounts for WooCommerce versions prior to 3.0.1 Description An unauthenticated Insecure Direct Object Reference IDOR exists in the software. IDOR is a type of access control vulnerability that occurs when an...

CVE-2026-56048: Authorization Bypass Through User-Controlled Key

Unauthenticated Insecure Direct Object References IDOR in Payment Gateway Based Fees and Discounts for WooCommerce = 3.0.0 versions...