School Fees Payment System datatable.php File SQL Injection Vulnerability

School Fees Payment System is a tuition payment system. The School Fees Payment System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter sSortDir0 in the file /datatable.php. An attacker can exploit this...

CVE-2023-3381

A vulnerability classified as problematic was found in SourceCodester Online School Fees System 1.0. Affected by this vulnerability is an unknown functionality of the file /paysystem/datatable.php of the component GET Parameter Handler. The manipulation of the argument doj leads to cross site...

Online School Fees System Cross-site Script Vulnerability

Online School Fees System is an online school fees system by Lewa Personal Developer. A cross-site scripting vulnerability exists in Online School Fees System version 1.0, which stems from a problem in the file /paysystem/datatable.php, where incorrect manipulation of the parameter doj can lead t...