Lucene search
+L

687 matches found

Kitploit
Kitploit
added 2026/09/16 10:39 a.m.11 views

CVE-2023-51800

CVE-2023-51800 School Fees Management System v1.0 - Múltiples vulnerabilidades de cross-site scripting XSS Descripción : Múltiples vulnerabilidades de cross-site scripting XSS en School Fees Management System v1.0. Versión del Producto Vulnerable : School Fees Management System v1.0 Autor del CVE...

6.1CVSS5.8AI score0.00628EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 8:01 a.m.7 views

CVE-2023-49981

CVE-2023-49981 School Fees Management System v1.0 - Control de acceso incorrecto - Listado de directorio Descripción : Una vulnerabilidad de listado de directorio en School Fees Management System v1.0 permite a los atacantes enumerar directorios y archivos sensibles dentro de la aplicación sin...

7.5CVSS5.8AI score0.00745EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 6:40 a.m.13 views

CVE-2023-49984

CVE-2023-49984 School Fees Management System v1.0 - Vulnerabilidad de Cross-Site Scripting XSS en el campo/parámetro "name" en "/management/settings" Descripción : Una vulnerabilidad de cross-site scripting XSS en el componente "/management/settings" de School Fees Management System v1.0 permite ...

6.1CVSS6.2AI score0.00483EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 6:08 a.m.11 views

CVE-2023-49986

CVE-2023-49986 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "name" parameter on "addnewparent" Descripción : Una vulnerabilidad de cross-site scripting XSS en el componente “addnewparent” de School Fees Management System 1.0 permite a los atacantes ejecutar scrip...

4.7CVSS6.2AI score0.00471EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 5:55 a.m.14 views

CVE-2023-49983

CVE-2023-49983 School Fees Management System v1.0 - Vulnerabilidad de Cross-Site Scripting XSS en el campo/parámetro "name" en "/management/class" Descripción : Una vulnerabilidad de cross-site scripting XSS en el componente "/management/class" de School Fees Management System v1.0 permite a los...

6.8CVSS6.2AI score0.00574EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 3:09 a.m.10 views

CVE-2023-49985

CVE-2023-49985 School Fees Management System v1.0 - Vulnerabilidad de Cross-Site Scripting XSS en el parámetro "cname" en "newclass" Descripción : Una vulnerabilidad de cross-site scripting XSS en el componente "newclass" de School Fees Management System v1.0 permite a los atacantes ejecutar...

6.5CVSS6.2AI score0.00468EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/16 2:04 a.m.69 views

Code-Projects School Fees Payment System 1.0 - SQL Injection

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS7AI score0.01915EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/09/16 12:16 a.m.10 views

CVE-2023-49987

CVE-2023-49987 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "tname" parameter on "newterm" Description : A cross-site scripting XSS vulnerability in the component “newterm” of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or...

5.4CVSS6.3AI score0.00431EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 10:29 p.m.8 views

CVE-2023-49982

CVE-2023-49982 School Fees Management System v1.0 - Incorrect Access Control - Privilege Escalation Description : Broken access control in School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and deleting user accounts...

8.8CVSS5.9AI score0.00842EPSS
SaveExploits1
EUVD
EUVD
added 2026/09/03 3:22 p.m.10 views

EUVD-2026-70527

Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment PoC+ consensus algorithm. Prior to version 3.9.9, an integer overflow in BlockServiceImpl.applyBlock allowed a miner to receive an arbitrarily inflated block reward by crafting a block with a negative...

7.5CVSS5.8AI score0.00203EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/26 3:16 p.m.18 views

CVE-2026-56048

Unauthenticated Insecure Direct Object References IDOR in Payment Gateway Based Fees and Discounts for WooCommerce = 3.0.0 versions...

6.5CVSS0.00332EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/26 2:52 p.m.51 views

CVE-2026-56048 WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 3.0.0 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Payment Gateway Based Fees and Discounts for WooCommerce = 3.0.0 versions...

6.5CVSS0.00332EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/26 2:52 p.m.20 views

EUVD-2026-39709

Unauthenticated Insecure Direct Object References IDOR in Payment Gateway Based Fees and Discounts for WooCommerce = 3.0.0 versions...

6.5CVSS5.8AI score0.00332EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/26 2:52 p.m.32 views

CVE-2026-56048

Summary: CVE-2026-56048 concerns the WordPress plugin “Payment Gateway Based Fees and Discounts for WooCommerce” (versions ≤ 3.0.0). The vulnerability is described as an unauthenticated insecure direct object reference (IDOR). The connected documents confirm the affected product and root cause (I...

6.5CVSS5.8AI score0.00332EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/26 12:00 a.m.24 views

PT-2026-52762

Name of the Vulnerable Software and Affected Versions Payment Gateway Based Fees and Discounts for WooCommerce versions prior to 3.0.1 Description An unauthenticated Insecure Direct Object Reference IDOR exists in the software. IDOR is a type of access control vulnerability that occurs when an...

6.5CVSS5.8AI score0.00332EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2026/06/25 9:16 a.m.16 views

WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 3.0.0 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Jakub Herman in WordPress Plugin Payment Gateway Based Fees and Discounts for WooCommerce versions = 3.0.0...

6.5CVSS5.8AI score0.00332EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/06/05 7:48 p.m.19 views

CVE-2026-10301

A vulnerability was detected in itsourcecode Fees Management System 1.0. The affected element is an unknown function of the file index.php. Performing a manipulation of the argument page results in cross site scripting. The attack may be initiated remotely. The exploit is now public and may be us...

5.3CVSS4.1AI score0.00273EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:48 p.m.17 views

CVE-2026-10808

A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown function of the file /managestudent.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be use...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:48 p.m.20 views

CVE-2026-10811

A security vulnerability has been detected in itsourcecode Fees Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /receipt.php. Such manipulation of the argument efid leads to sql injection. The attack may be performed from remote. The exploit has been...

6.5CVSS6.4AI score0.002EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:48 p.m.17 views

CVE-2026-10297

A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown part of the file /managecourse.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References1
Rows per page
Query Builder