CVE-2023-51800

CVE-2023-51800 School Fees Management System v1.0 - Molteplici vulnerabilità di cross-site scripting XSS Descrizione : Molteplici vulnerabilità di cross-site scripting XSS in School Fees Management System v1.0. Versione del prodotto vulnerabile : School Fees Management System v1.0 Autore CVE :...

Code-Projects School Fees Payment System 1.0 - SQL Injection

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2023-49986

CVE-2023-49986 School Fees Management System v1.0 - Vulnerabilidade de Cross-Site Scripting XSS no parâmetro "name" em "addnewparent" Description : Uma vulnerabilidade de cross-site scripting XSS no componente “addnewparent” do School Fees Management System 1.0 permite que atacantes executem...

CVE-2023-49985

CVE-2023-49985 School Fees Management System v1.0 - Vulnerabilità Cross-Site Scripting XSS nel parametro "cname" su "newclass" Descrizione : Una vulnerabilità di cross-site scripting XSS nel componente "newclass" di School Fees Management System v1.0 consente agli attaccanti di eseguire script we...

CVE-2023-49984

CVE-2023-49984 स्कूल फीस प्रबंधन प्रणाली v1.0 - "/management/settings" पर "name" फ़ील्ड/पैरामीटर में क्रॉस-साइट स्क्रिप्टिंग XSS कमजोरी विवरण : School Fees Management System v1.0 के "/management/settings" घटक में एक क्रॉस-साइट स्क्रिप्टिंग XSS कमजोरी हमलावरों को name पैरामीटर में इंजेक्ट किए गए ए...

CVE-2023-49983

CVE-2023-49983 School Fees Management System v1.0 - Vulnerabilità Cross-Site Scripting XSS nel campo/parametro "name" su "/management/class" Descrizione : Una vulnerabilità di cross-site scripting XSS nel componente "/management/class" di School Fees Management System v1.0 consente a un attaccant...

CVE-2023-49982

CVE-2023-49982 School Fees Management System v1.0 - Falsche Zugriffskontrolle - Privilegieneskalation Beschreibung : Eine fehlerhafte Zugriffskontrolle im School Fees Management System v1.0 ermöglicht es Angreifern, Privilegien zu eskalieren und administrative Aktionen durchzuführen, einschließli...

CVE-2023-49981

CVE-2023-49981 Sistema de Gestão de Taxas Escolares v1.0 - Controle de Acesso Incorreto - Listagem de Diretórios Descrição : Uma vulnerabilidade de listagem de diretórios no Sistema de Gestão de Taxas Escolares v1.0 permite que atacantes listem diretórios e arquivos sensíveis dentro da aplicação...

CVE-2023-49986

A cross-site scripting XSS vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

CVE-2023-49981

A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization...

CVE-2023-49985

A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cname parameter...

CVE-2023-49987

A cross-site scripting XSS vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter...

VulnCheck KEV: CVE-2025-6403

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

School Fees Payment Management System /ajax.php?action=login File SQL Injection Vulnerability

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement for the parameter Username in the file...

School Fees Payment Management System /ajax.php?action=save_course File SQL Injection Vulnerability

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from a lack of validation of an externally entered SQL statement in the parameter ID of the file...

CVE-2025-13274

A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=deletefees. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The...

CVE-2025-13273

A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletepayment. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

CVE-2025-13271

A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

CVE-2025-13272

A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Affected is an unknown function of the file /managecourse.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be us...

CVE-2025-13269

A vulnerability has been found in Campcodes School Fees Payment Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=savepayment. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...