Lucene search
K

568 matches found

OSV
OSV
added 2026/03/03 9:16 p.m.1 views

CVE-2026-3486

A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /admin/student-fee.php. Such manipulation of the argument rollno leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed t...

7.2CVSS5.8AI score
Exploits0References5
NVD
NVD
added 2026/03/03 9:16 p.m.2 views

CVE-2026-3486

A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /admin/student-fee.php. Such manipulation of the argument rollno leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed t...

7.2CVSS0.00012EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/03/03 9:2 p.m.17 views

CVE-2026-3486 itsourcecode College Management System student-fee.php sql injection

A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /admin/student-fee.php. Such manipulation of the argument rollno leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed t...

5.8CVSS0.00012EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/03/03 9:2 p.m.3 views

CVE-2026-3486

A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /admin/student-fee.php. Such manipulation of the argument rollno leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed t...

5.8CVSS5.8AI score0.00012EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2026/03/03 9:2 p.m.4 views

CVE-2026-3486

CVE-2026-3486 affects itsourcecode College Management System 1.0. The issue is a SQL injection in the file /admin/student-fee.php caused by manipulation of the roll_no parameter, exploitable remotely, with public exploit/disclosure noted. The NVD metrics indicate high impact on confidentiality, i...

7.2CVSS5.8AI score0.00012EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/03 12:0 a.m.1 views

PT-2026-22825

A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /admin/student-fee.php. Such manipulation of the argument roll no leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed ...

5.8CVSS5.8AI score0.00012EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2026/01/09 10:48 a.m.5 views

CVE-2022-31908

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

7.2CVSS8.1AI score0.00274EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:55 a.m.3 views

CVE-2020-12119

Ledger Live before 2.7.0 does not handle Bitcoin's Replace-By-Fee RBF. It increases the user's balance with the value of an unconfirmed transaction as soon as it is received before the transaction is confirmed and does not decrease the balance when it is canceled. As a result, users are exposed t...

8.1CVSS6.9AI score0.002EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:36 a.m.9 views

CVE-2024-34933

A SQL injection vulnerability in /model/updategrade.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the admissionfee parameter...

6.3CVSS8.5AI score0.00076EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:30 a.m.3 views

CVE-2023-29093

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PI Websolution Conditional cart fee plugin = 1.0.96 versions...

5.9CVSS6.9AI score0.0008EPSS
Exploits0References1
OSV
OSV
added 2025/12/08 1:16 a.m.0 views

CVE-2025-14206

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

7.5CVSS5.5AI score0.0015EPSS
Exploits1References5
NVD
NVD
added 2025/12/08 1:16 a.m.4 views

CVE-2025-14206

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

7.5CVSS0.0015EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/12/08 12:2 a.m.31 views

CVE-2025-14206 SourceCodester Online Student Clearance System Fee Table delete-fee.php improper authorization

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

6.9CVSS0.0015EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/12/08 12:2 a.m.3 views

CVE-2025-14206 SourceCodester Online Student Clearance System Fee Table delete-fee.php improper authorization

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

6.9CVSS6.3AI score0.0015EPSS
Exploits1References5
CVE
CVE
added 2025/12/08 12:2 a.m.5 views

CVE-2025-14206

CVE-2025-14206 affects SourceCodester Online Student Clearance System 1.0 in the Fee Table Handler, specifically /Admin/delete-fee.php. Manipulating the ID parameter can lead to improper authorization, with remote exploitation; public exploit details exist. Remediation guidance across connected s...

7.5CVSS6.2AI score0.0015EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.3 views

PT-2025-49420

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Clearance System version 1.0 Description A flaw exists in the system that could allow improper authorization. This issue stems from manipulating the ID argument within an unknown function of the file...

7.5CVSS6.4AI score0.0015EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.5 views

SourceCodester Online Student Clearance System 授权问题漏洞

SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. An authorization issue vulnerability exists in version 1.0 of the SourceCodester Online Student Clearance System, which stems from incorrect manipulation of the parameter ID in the fil...

7.5CVSS6.4AI score0.0015EPSS
Exploits1References6
Malwarebytes
Malwarebytes
added 2025/11/13 2:43 p.m.3 views

1 million victims, 17,500 fake sites: Google takes on toll-fee scammers

A Phishing-as-a-Service PhaaS platform based in China, known as “Lighthouse,” is the subject of a new Google lawsuit. Lighthouse enables smishing SMS phishing campaigns, and if you’re in the US there is a good chance you've seen their texts about a small amount you supposedly owe in toll fees...

7AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/11/10 12:22 p.m.1 views

CVE-2025-12918

A security flaw has been discovered in yungifez Skuul School Management System up to 2.6.5. The impacted element is an unknown function of the file /dashboard/fees/fee-invoices/ of the component View Fee Invoice. Performing manipulation of the argument invoiceid results in improper control of...

5.3CVSS6.3AI score0.00036EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/09 9:30 a.m.4 views

EUVD-2025-38446

A security flaw has been discovered in yungifez Skuul School Management System up to 2.6.5. The impacted element is an unknown function of the file /dashboard/fees/fee-invoices/ of the component View Fee Invoice. Performing manipulation of the argument invoiceid results in improper control of...

3.1CVSS5.9AI score0.00036EPSS
Exploits1References6
Rows per page
Query Builder