CVE-2024-7168

CVE-2024-7168 affects SourceCodester School Fees Payment System 1.0. The vulnerability is an SQL injection in the /manage_user.php file triggered by manipulating the id parameter, enabling remote access with high impact as described in multiple sources. The exploit has been disclosed publicly. No...

CVE-2024-7168 SourceCodester School Fees Payment System manage_user.php sql injection

A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /manageuser.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2024-7167 SourceCodester School Fees Payment System manage_course.php sql injection

A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /managecourse.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely...

CVE-2024-7167

CVE-2024-7167 affects SourceCodester School Fees Payment System v1.0, with an SQL injection in the /manage_course.php file via the id parameter. The vulnerability is exploitable remotely and is described as critical; exploitation can lead to disclosure, modification, or damage of data due to inje...

CVE-2024-7167 SourceCodester School Fees Payment System manage_course.php sql injection

A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /managecourse.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely...

CVE-2024-7165

A vulnerability was found in SourceCodester School Fees Payment System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewpayment.php. The manipulation of the argument efid leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-7165

A vulnerability was found in SourceCodester School Fees Payment System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewpayment.php. The manipulation of the argument efid leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-7166

A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been classified as critical. Affected is an unknown function of the file /receipt.php. The manipulation of the argument efid leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...

CVE-2024-7166 SourceCodester School Fees Payment System receipt.php sql injection

A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been classified as critical. Affected is an unknown function of the file /receipt.php. The manipulation of the argument efid leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...

CVE-2024-7166

SourceCodester School Fees Payment System 1.0 contains a SQL injection in /receipt.php via the ef_id parameter. The vulnerability allows remote exploitation and is publicly disclosed. Affected component: the receipt.php handling logic; root cause: improper handling of ef_id leading to injection. ...

CVE-2024-7166 SourceCodester School Fees Payment System receipt.php sql injection

A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been classified as critical. Affected is an unknown function of the file /receipt.php. The manipulation of the argument efid leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...

CVE-2024-7165 SourceCodester School Fees Payment System view_payment.php sql injection

A vulnerability was found in SourceCodester School Fees Payment System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewpayment.php. The manipulation of the argument efid leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-7165 SourceCodester School Fees Payment System view_payment.php sql injection

A vulnerability was found in SourceCodester School Fees Payment System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewpayment.php. The manipulation of the argument efid leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-7165

CVE-2024-7165 affects SourceCodester School Fees Payment System 1.0, via SQL injection in the /view_payment.php file caused by manipulating the ef_id parameter. The issue can be exploited remotely and an exploit has been disclosed publicly. Connected sources confirm the vulnerability details and ...

CVE-2024-7164

A vulnerability has been found in SourceCodester School Fees Payment System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The explo...

CVE-2024-7164 SourceCodester School Fees Payment System sql injection

A vulnerability has been found in SourceCodester School Fees Payment System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The explo...

CVE-2024-7164 SourceCodester School Fees Payment System sql injection

A vulnerability has been found in SourceCodester School Fees Payment System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The explo...

CVE-2024-7164

CVE-2024-7164 affects SourceCodester School Fees Payment System v1.0. The vulnerability is an SQL injection in the /ajax.php?action=login endpoint, triggered by manipulating the username parameter. Exploitation is remote and has been publicly disclosed. Data confidentiality, integrity, and availa...

PT-2024-38126 · Unknown · Sourcecodester School Fees Payment System

Name of the Vulnerable Software and Affected Versions: SourceCodester School Fees Payment System version 1.0 Description: A critical issue has been found in the system, affecting the /ajax.php?action=login file. The manipulation of the username argument leads to SQL injection. The attack can be...

SourceCodester School Fees Payment System SQL注入漏洞

SourceCodester School Fees Payment System is a school fees payment system. A SQL injection vulnerability exists in version 1.0 of the SourceCodester School Fees Payment System, which stems from an SQL injection vulnerability in the efid parameter of the /viewpayment.php file...