CVE-2023-51800

CVE-2023-51800 School Fees Management System v1.0 - Molteplici vulnerabilità di cross-site scripting XSS Descrizione : Molteplici vulnerabilità di cross-site scripting XSS in School Fees Management System v1.0. Versione del prodotto vulnerabile : School Fees Management System v1.0 Autore CVE :...

CVE-2023-49987

CVE-2023-49987 School Fees Management System v1.0 - Vulnerabilità Cross-Site Scripting XSS nel parametro "tname" su "newterm" Descrizione : Una vulnerabilità di cross-site scripting XSS nel componente "newterm" di School Fees Management System 1.0 consente a un utente malintenzionato di eseguire...

CVE-2023-49986

CVE-2023-49986 School Fees Management System v1.0 - Vulnerabilidade de Cross-Site Scripting XSS no parâmetro "name" em "addnewparent" Description : Uma vulnerabilidade de cross-site scripting XSS no componente “addnewparent” do School Fees Management System 1.0 permite que atacantes executem...

CVE-2023-49983

CVE-2023-49983 School Fees Management System v1.0 - Vulnerabilità Cross-Site Scripting XSS nel campo/parametro "name" su "/management/class" Descrizione : Una vulnerabilità di cross-site scripting XSS nel componente "/management/class" di School Fees Management System v1.0 consente a un attaccant...

CVE-2023-49982

CVE-2023-49982 School Fees Management System v1.0 - Falsche Zugriffskontrolle - Privilegieneskalation Beschreibung : Eine fehlerhafte Zugriffskontrolle im School Fees Management System v1.0 ermöglicht es Angreifern, Privilegien zu eskalieren und administrative Aktionen durchzuführen, einschließli...

CVE-2023-49981

CVE-2023-49981 Sistema de Gestão de Taxas Escolares v1.0 - Controle de Acesso Incorreto - Listagem de Diretórios Descrição : Uma vulnerabilidade de listagem de diretórios no Sistema de Gestão de Taxas Escolares v1.0 permite que atacantes listem diretórios e arquivos sensíveis dentro da aplicação...

CVE-2026-10301

A vulnerability was detected in itsourcecode Fees Management System 1.0. The affected element is an unknown function of the file index.php. Performing a manipulation of the argument page results in cross site scripting. The attack may be initiated remotely. The exploit is now public and may be us...

CVE-2026-10808

A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown function of the file /managestudent.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be use...

CVE-2026-10811

A security vulnerability has been detected in itsourcecode Fees Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /receipt.php. Such manipulation of the argument efid leads to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-10297

A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown part of the file /managecourse.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used...

CVE-2026-10568

A vulnerability was detected in itsourcecode Fees Management System 1.0. Affected is an unknown function of the file /managepayment.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-10809

A security flaw has been discovered in itsourcecode Fees Management System 1.0. This impacts an unknown function of the file /manageuser.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be...

CVE-2026-10810

A weakness has been identified in itsourcecode Fees Management System up to 1.0. Affected is an unknown function of the file /navbar.php. This manipulation of the argument page causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2026-10296

A vulnerability was determined in itsourcecode Fees Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit has been publicl...

CVE-2026-10811

A security vulnerability has been detected in itsourcecode Fees Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /receipt.php. Such manipulation of the argument efid leads to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-10809

A security flaw has been discovered in itsourcecode Fees Management System 1.0. This impacts an unknown function of the file /manageuser.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be...

CVE-2026-10810

A weakness has been identified in itsourcecode Fees Management System up to 1.0. Affected is an unknown function of the file /navbar.php. This manipulation of the argument page causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2026-10808

A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown function of the file /managestudent.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be use...

CVE-2026-10811

The CVE covers itsourcecode Fees Management System 1.0, where an SQL injection affects the unknown functionality in /receipt.php via the ef_id argument. The vulnerability can be exploited remotely and has publicly disclosed exploit information. The description does not specify a vendor patch, ver...

CVE-2026-10811 itsourcecode Fees Management System receipt.php sql injection

A security vulnerability has been detected in itsourcecode Fees Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /receipt.php. Such manipulation of the argument efid leads to sql injection. The attack may be performed from remote. The exploit has been...