52 matches found
CVE-2023-49983
CVE-2023-49983 School Fees Management System v1.0 - 「/management/class」の「name」フィールド/パラメータにおけるクロスサイトスクリプティング(XSS)脆弱性 説明 : School Fees Management System v1.0のコンポーネント「/management/class」におけるクロスサイトスクリプティング(XSS)脆弱性により、攻撃者はnameパラメータに注入された細工されたペイロードを介して任意のウェブスクリプトまたはHTMLを実行できます。 脆弱性のある製品バージョン : School Fe...
CVE-2023-51800
CVE-2023-51800 School Fees Management System v1.0 - 多个跨站脚本(XSS)漏洞 描述 :School Fees Management System v1.0 存在多个跨站脚本(XSS)漏洞。 受影响的产品版本 :School Fees Management System v1.0 CVE 作者 :Geraldo Alcântara 日期 :28/11/2023 确认日期 :10/12/2023 CVE :CVE-2023-51800 CVE 链接 :https://vulners.com/cve/CVE-2023-51800 NVD 链...
CVE-2023-49982
CVE-2023-49982 School Fees Management System v1.0 - 访问控制不当 - 权限提升 描述 :School Fees Management System v1.0 中的访问控制失效允许攻击者提升权限并执行管理操作,包括添加和删除用户账户。 受影响产品版本 :School Fees Management System v1.0 CVE 作者 :Geraldo Alcântara 日期 :29/11/2023 确认日期 :15/12/2023 CVE :CVE-2023-49982 测试平台 :Windows 受影响的组件 :...
CVE-2023-49986
CVE-2023-49986 School Fees Management System v1.0 - "addnewparent"组件中"name"参数的跨站脚本(XSS)漏洞 描述 : School Fees Management System 1.0的"addnewparent"组件中存在一个跨站脚本(XSS)漏洞,攻击者可通过构造的恶意有效载荷注入"name"参数,从而执行任意Web脚本或HTML。 受影响产品版本 : School Fees Management System v1.0 CVE作者 : Geraldo Alcântara 日期 : 2023年11月28日 确认日...
CVE-2023-49981
CVE-2023-49981 School Fees Management System v1.0 - 访问控制不当 - 目录浏览 描述 :School Fees Management System v1.0 中的目录浏览漏洞允许攻击者在无需身份验证/授权的情况下列出应用程序中的目录和敏感文件。 受影响产品版本 :School Fees Management System v1.0 CVE 作者 :Geraldo Alcântara 日期 :28/11/2023 确认于 :19/12/2023 CVE :CVE-2023-49981 测试平台 :Windows 复现步骤: 受影响组件:...
CVE-2023-49986
A cross-site scripting XSS vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...
CVE-2023-49981
A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization...
CVE-2023-49985
A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cname parameter...
CVE-2023-49987
A cross-site scripting XSS vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter...
CVE-2023-51800
Cross Site Scripting XSS vulnerability in School Fees Management System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the mainsettings component in the phone, address, bank, accname, accnumber parameters, newclass and cname parameter, addnewparent function in t...
CVE-2023-49983
A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...
CVE-2023-49981
A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization...
CVE-2023-49984
A cross-site scripting XSS vulnerability in the component /management/settings of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...
CVE-2023-49983
A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...
CVE-2023-49985
A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cname parameter...
CVE-2023-49983
A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...
CVE-2023-49985
A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cname parameter...
School Fees Management System 安全漏洞
School Fees Management System is a tuition management system. A security vulnerability exists in School Fees Management System version v1.0 that originates from a broken access control in /admin/management/users...
School Fees Management System 安全漏洞
School Fees Management System is a tuition management system. A security vulnerability exists in School Fees Management System v1.0, which originates from a cross-site scripting XSS vulnerability in /management/class...
Improper access control
Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and deleting user accounts...