CVE-2023-49981

The vulnerability CVE-2023-49981 affects School Fees Management System v1.0 and is a directory listing flaw caused by an improper access control/logic that allows unauthenticated users to enumerate directories and sensitive files. The CVSS v3.1 base score is 7.5 (HIGH) with NETWORK attack vector,...

CVE-2023-49981

A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization...

CVE-2023-49982

CVE-2023-49982 affects School Fees Management System v1.0, specifically the vulnerable component at /admin/management/users. The root cause is broken access control that allows an attacker to escalate privileges and perform administrative actions, including adding and deleting user accounts. The ...

CVE-2023-49984

The CVE-2023-49984 entry affects School Fees Management System v1.0, with an XSS vulnerability in the /management/settings component. The issue allows attackers to inject arbitrary web scripts or HTML via the name parameter, enabling potential script execution. The vulnerability is documented acr...

CVE-2023-49981

A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization...

CVE-2023-49985

A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cname parameter...

CVE-2023-49984

A cross-site scripting XSS vulnerability in the component /management/settings of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

CVE-2023-49983

A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

CVE-2023-49985

The CVE-2023-49985 entry concerns a cross-site scripting (XSS) flaw in the School Fees Management System v1.0, specifically in the /management/class component, where an attacker can inject arbitrary web scripts via the cname parameter. The Red Hat/NVD/CNNVD/PRION and related entries confirm the v...

CVE-2023-49985

A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cname parameter...

CVE-2023-49983

CVE-2023-49983 is an XSS vulnerability in the School Fees Management System v1.0, affecting the /management/class component. The issue allows an attacker to inject arbitrary web scripts or HTML through the name parameter, with impact described as high confidentiality impact and low integrity/avai...

Cross site scripting

Cross Site Scripting XSS vulnerability in School Fees Management System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the mainsettings component in the phone, address, bank, accname, accnumber parameters, newclass and cname parameter, addnewparent function in t...

CVE-2023-51800

CVE-2023-51800 affects the School Fees Management System v1.0. The Red Hat/NVD/PRION entries describe a Cross Site Scripting (XSS) vulnerability that lets a remote attacker execute arbitrary code via a crafted payload in the main_settings component across multiple fields (phone, address, bank, ac...