CVE-2023-49983

A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

CVE-2023-49983

CVE-2023-49983 is an XSS vulnerability in the School Fees Management System v1.0, affecting the /management/class component. The issue allows an attacker to inject arbitrary web scripts or HTML through the name parameter, with impact described as high confidentiality impact and low integrity/avai...

CVE-2023-49985

A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cname parameter...

CVE-2023-49985

The CVE-2023-49985 entry concerns a cross-site scripting (XSS) flaw in the School Fees Management System v1.0, specifically in the /management/class component, where an attacker can inject arbitrary web scripts via the cname parameter. The Red Hat/NVD/CNNVD/PRION and related entries confirm the v...

Cross site scripting

Cross Site Scripting XSS vulnerability in School Fees Management System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the mainsettings component in the phone, address, bank, accname, accnumber parameters, newclass and cname parameter, addnewparent function in t...

CVE-2023-51800

CVE-2023-51800 affects the School Fees Management System v1.0. The Red Hat/NVD/PRION entries describe a Cross Site Scripting (XSS) vulnerability that lets a remote attacker execute arbitrary code via a crafted payload in the main_settings component across multiple fields (phone, address, bank, ac...

PT-2023-31446 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Fees Management System version 1.0 Description: A cross-site scripting XSS issue in the /management/term component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter...

PT-2023-31441 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Fees Management System version 1.0 Description: The issue allows attackers to escalate privileges and perform administrative actions, including adding and deleting user accounts, due to broken access control in the...

PT-2023-31440 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Fees Management System version 1.0 Description: A directory listing issue allows attackers to list directories and sensitive files within the application without requiring authorization. Recommendations: For School Fees Management Syst...