CVE-2023-49987

CVE-2023-49987 School Fees Management System v1.0 - 在 "newterm" 的 "tname" 参数中存在跨站脚本（XSS）漏洞 描述 : School Fees Management System 1.0 的 "newterm" 组件存在跨站脚本（XSS）漏洞，攻击者可通过向 "tname" 参数注入精心构造的有效载荷来执行任意 web 脚本或 HTML。 受影响产品版本 : School Fees Management System v1.0 CVE 作者 : Geraldo Alcântara 日期 : 2023/11/28 确认...

CVE-2023-49986

CVE-2023-49986 School Fees Management System v1.0 - "addnewparent"组件中"name"参数的跨站脚本（XSS）漏洞 描述 : School Fees Management System 1.0的"addnewparent"组件中存在一个跨站脚本（XSS）漏洞，攻击者可通过构造的恶意有效载荷注入"name"参数，从而执行任意Web脚本或HTML。 受影响产品版本 : School Fees Management System v1.0 CVE作者 : Geraldo Alcântara 日期 : 2023年11月28日 确认日...

CVE-2023-49983

CVE-2023-49983 School Fees Management System v1.0 - "/management/class" 上 “name” 字段/参数中的跨站脚本（XSS）漏洞 描述 ：School Fees Management System v1.0 的 “/management/class” 组件中存在一个跨站脚本（XSS）漏洞，攻击者可通过向 name 参数注入特制负载来执行任意 Web 脚本或 HTML。 受影响产品版本 ：School Fees Management System v1.0 CVE 作者 ：Geraldo Alcântara 日期 ：20...

CVE-2023-51800

CVE-2023-51800 School Fees Management System v1.0 - 多个跨站脚本（XSS）漏洞 描述 ：School Fees Management System v1.0 存在多个跨站脚本（XSS）漏洞。 受影响的产品版本 ：School Fees Management System v1.0 CVE 作者 ：Geraldo Alcântara 日期 ：28/11/2023 确认日期 ：10/12/2023 CVE ：CVE-2023-51800 CVE 链接 ：https://vulners.com/cve/CVE-2023-51800 NVD 链...

CVE-2023-49981

CVE-2023-49981 School Fees Management System v1.0 - 访问控制不当 - 目录浏览 描述 ：School Fees Management System v1.0 中的目录浏览漏洞允许攻击者在无需身份验证/授权的情况下列出应用程序中的目录和敏感文件。 受影响产品版本 ：School Fees Management System v1.0 CVE 作者 ：Geraldo Alcântara 日期 ：28/11/2023 确认于 ：19/12/2023 CVE ：CVE-2023-49981 测试平台 ：Windows 复现步骤： 受影响组件：...

CVE-2023-49982

CVE-2023-49982 School Fees Management System v1.0 - 访问控制不当 - 权限提升 描述 ：School Fees Management System v1.0 中的访问控制失效允许攻击者提升权限并执行管理操作，包括添加和删除用户账户。 受影响产品版本 ：School Fees Management System v1.0 CVE 作者 ：Geraldo Alcântara 日期 ：29/11/2023 确认日期 ：15/12/2023 CVE ：CVE-2023-49982 测试平台 ：Windows 受影响的组件 ：...

CVE-2026-10301

A vulnerability was detected in itsourcecode Fees Management System 1.0. The affected element is an unknown function of the file index.php. Performing a manipulation of the argument page results in cross site scripting. The attack may be initiated remotely. The exploit is now public and may be us...

CVE-2026-10808

A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown function of the file /managestudent.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be use...

CVE-2026-10811

A security vulnerability has been detected in itsourcecode Fees Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /receipt.php. Such manipulation of the argument efid leads to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-10297

A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown part of the file /managecourse.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used...

CVE-2026-10568

A vulnerability was detected in itsourcecode Fees Management System 1.0. Affected is an unknown function of the file /managepayment.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-10809

A security flaw has been discovered in itsourcecode Fees Management System 1.0. This impacts an unknown function of the file /manageuser.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be...

CVE-2026-10810

A weakness has been identified in itsourcecode Fees Management System up to 1.0. Affected is an unknown function of the file /navbar.php. This manipulation of the argument page causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2026-10296

A vulnerability was determined in itsourcecode Fees Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit has been publicl...

CVE-2026-10811

A security vulnerability has been detected in itsourcecode Fees Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /receipt.php. Such manipulation of the argument efid leads to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-10809

A security flaw has been discovered in itsourcecode Fees Management System 1.0. This impacts an unknown function of the file /manageuser.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be...

CVE-2026-10810

A weakness has been identified in itsourcecode Fees Management System up to 1.0. Affected is an unknown function of the file /navbar.php. This manipulation of the argument page causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2026-10808

A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown function of the file /managestudent.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be use...

CVE-2026-10811

The CVE covers itsourcecode Fees Management System 1.0, where an SQL injection affects the unknown functionality in /receipt.php via the ef_id argument. The vulnerability can be exploited remotely and has publicly disclosed exploit information. The description does not specify a vendor patch, ver...

CVE-2026-10811 itsourcecode Fees Management System receipt.php sql injection

A security vulnerability has been detected in itsourcecode Fees Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /receipt.php. Such manipulation of the argument efid leads to sql injection. The attack may be performed from remote. The exploit has been...