CVE-2023-51800

CVE-2023-51800 School Fees Management System v1.0 - Multiples vulnérabilités de cross-site scripting XSS Description : Multiples vulnérabilités de cross-site scripting XSS dans School Fees Management System v1.0. Version du produit vulnérable : School Fees Management System v1.0 Auteur du CVE :...

CVE-2023-49986

CVE-2023-49986 School Fees Management System v1.0 — Межсайтовый скриптинг XSS уязвимость в параметре "name" в разделе "addnewparent" Описание : Межсайтовый скриптинг XSS в компоненте “addnewparent” системы управления школьными сборами версии 1.0 позволяет злоумышленникам выполнять произвольные...

CVE-2023-49983

CVE-2023-49983 School Fees Management System v1.0 - Vulnérabilité de Cross-Site Scripting XSS dans le champ/paramètre "name" sur "/management/class" Description : Une vulnérabilité de cross-site scripting XSS dans le composant "/management/class" de School Fees Management System v1.0 permet à des...

CVE-2023-49982

CVE-2023-49982 School Fees Management System v1.0 - Contrôle d'accès incorrect - Escalade de privilèges Description : Un contrôle d'accès incorrect dans School Fees Management System v1.0 permet aux attaquants d'escalader les privilèges et d'effectuer des actions administratives, notamment l'ajou...

CVE-2023-49981

CVE-2023-49981 School Fees Management System v1.0 - 부적절한 접근 제어 - 디렉터리 목록 노출 설명 : School Fees Management System v1.0의 디렉터리 목록 노출 취약점으로 인해 공격자가 인증/권한 부여 없이 애플리케이션 내의 디렉터리와 민감한 파일을 나열할 수 있습니다. 취약한 제품 버전 : School Fees Management System v1.0 CVE 작성자 : Geraldo Alcântara 날짜 : 2023/11/28 확인된 날짜 :...

CVE-2023-49986

A cross-site scripting XSS vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

CVE-2023-49981

A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization...

CVE-2023-49985

A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cname parameter...

CVE-2023-49987

A cross-site scripting XSS vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter...

CVE-2023-51800

Cross Site Scripting XSS vulnerability in School Fees Management System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the mainsettings component in the phone, address, bank, accname, accnumber parameters, newclass and cname parameter, addnewparent function in t...

CVE-2023-49983

A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

CVE-2023-49981

A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization...

CVE-2023-49984

A cross-site scripting XSS vulnerability in the component /management/settings of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

CVE-2023-49983

A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

CVE-2023-49985

A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cname parameter...

CVE-2023-49983

A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

CVE-2023-49985

A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cname parameter...

School Fees Management System 安全漏洞

School Fees Management System is a tuition management system. A security vulnerability exists in School Fees Management System version v1.0 that originates from a broken access control in /admin/management/users...

School Fees Management System 安全漏洞

School Fees Management System is a tuition management system. A security vulnerability exists in School Fees Management System v1.0, which originates from a cross-site scripting XSS vulnerability in /management/class...

Improper access control

Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and deleting user accounts...