Code-Projects School Fees Payment System 1.0 - SQL Injection

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2023-51800

CVE-2023-51800 School Fees Management System v1.0 - Múltiples vulnerabilidades de cross-site scripting XSS Descripción : Múltiples vulnerabilidades de cross-site scripting XSS en School Fees Management System v1.0. Versión del Producto Vulnerable : School Fees Management System v1.0 Autor del CVE...

CVE-2023-49981

CVE-2023-49981 School Fees Management System v1.0 - 访问控制不当 - 目录浏览 描述 ：School Fees Management System v1.0 中的目录浏览漏洞允许攻击者在无需身份验证/授权的情况下列出应用程序中的目录和敏感文件。 受影响产品版本 ：School Fees Management System v1.0 CVE 作者 ：Geraldo Alcântara 日期 ：28/11/2023 确认于 ：19/12/2023 CVE ：CVE-2023-49981 测试平台 ：Windows 复现步骤： 受影响组件：...

CVE-2023-49986

CVE-2023-49986 School Fees Management System v1.0 - "addnewparent"组件中"name"参数的跨站脚本（XSS）漏洞 描述 : School Fees Management System 1.0的"addnewparent"组件中存在一个跨站脚本（XSS）漏洞，攻击者可通过构造的恶意有效载荷注入"name"参数，从而执行任意Web脚本或HTML。 受影响产品版本 : School Fees Management System v1.0 CVE作者 : Geraldo Alcântara 日期 : 2023年11月28日 确认日...

CVE-2023-49984

CVE-2023-49984 School Fees Management System v1.0 - 跨站脚本（XSS）漏洞，位于 "/management/settings" 的 "name" 字段/参数 描述 ：School Fees Management System v1.0 的 "/management/settings" 组件中存在跨站脚本（XSS）漏洞，允许攻击者通过向 name 参数注入精心构造的有效载荷来执行任意 Web 脚本或 HTML。 受影响的产品版本 ：School Fees Management System v1.0 CVE 作者 ：Geraldo...

CVE-2023-49982

CVE-2023-49982 School Fees Management System v1.0 - 访问控制不当 - 权限提升 描述 ：School Fees Management System v1.0 中的访问控制失效允许攻击者提升权限并执行管理操作，包括添加和删除用户账户。 受影响产品版本 ：School Fees Management System v1.0 CVE 作者 ：Geraldo Alcântara 日期 ：29/11/2023 确认日期 ：15/12/2023 CVE ：CVE-2023-49982 测试平台 ：Windows 受影响的组件 ：...

CVE-2023-49985

CVE-2023-49985 School Fees Management System v1.0 - 在 "newclass" 的 "cname" 参数中存在跨站脚本（XSS）漏洞 描述 ：School Fees Management System v1.0 的 "newclass" 组件存在跨站脚本（XSS）漏洞，攻击者可通过向 cname 参数注入特制载荷来执行任意 Web 脚本或 HTML。 受影响产品版本 ：School Fees Management System v1.0 CVE 作者 ：Geraldo Alcântara 日期 ：28/11/2023 确认日期...

CVE-2023-49983

CVE-2023-49983 School Fees Management System v1.0 - "/management/class" 上 “name” 字段/参数中的跨站脚本（XSS）漏洞 描述 ：School Fees Management System v1.0 的 “/management/class” 组件中存在一个跨站脚本（XSS）漏洞，攻击者可通过向 name 参数注入特制负载来执行任意 Web 脚本或 HTML。 受影响产品版本 ：School Fees Management System v1.0 CVE 作者 ：Geraldo Alcântara 日期 ：20...

CVE-2023-49986

A cross-site scripting XSS vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

CVE-2023-49981

A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization...

CVE-2023-49985

A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cname parameter...

CVE-2023-49987

A cross-site scripting XSS vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter...

VulnCheck KEV: CVE-2025-6403

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

School Fees Payment Management System /ajax.php?action=login File SQL Injection Vulnerability

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement for the parameter Username in the file...

School Fees Payment Management System /ajax.php?action=save_course File SQL Injection Vulnerability

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from a lack of validation of an externally entered SQL statement in the parameter ID of the file...

CVE-2025-13274

A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=deletefees. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The...

CVE-2025-13273

A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletepayment. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

CVE-2025-13271

A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

CVE-2025-13272

A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Affected is an unknown function of the file /managecourse.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be us...

CVE-2025-13269

A vulnerability has been found in Campcodes School Fees Payment Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=savepayment. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...