CVE-2023-3381 SourceCodester Online School Fees System GET Parameter datatable.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Online School Fees System 1.0. Affected by this vulnerability is an unknown functionality of the file /paysystem/datatable.php of the component GET Parameter Handler. The manipulation of the argument doj leads to cross site...

CVE-2023-3381 SourceCodester Online School Fees System GET Parameter datatable.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Online School Fees System 1.0. Affected by this vulnerability is an unknown functionality of the file /paysystem/datatable.php of the component GET Parameter Handler. The manipulation of the argument doj leads to cross site...

CVE-2023-3381

CVE-2023-3381 affects SourceCodester Online School Fees System 1.0. The vulnerability is a cross-site scripting issue in the GET Parameter Handler, specifically the /paysystem/datatable.php file where manipulation of the doj argument can trigger XSS. It is exploitable remotely and has been disclo...

PT-2023-24505 · Sourcecodester · Sourcecodester Online School Fees System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online School Fees System version 1.0 Description: A problematic vulnerability was found in the file /paysystem/datatable.php of the component GET Parameter Handler. The manipulation of the doj argument leads to cross-site...

CVE-2023-3340

A vulnerability was found in SourceCodester Online School Fees System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ajx.php of the component GET Parameter Handler. The manipulation of the argument namestartsWith leads to sql injection. The attack...

Sql injection

A vulnerability was found in SourceCodester Online School Fees System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ajx.php of the component GET Parameter Handler. The manipulation of the argument namestartsWith leads to sql injection. The attack...

CVE-2023-3340 SourceCodester Online School Fees System GET Parameter ajx.php sql injection

A vulnerability was found in SourceCodester Online School Fees System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ajx.php of the component GET Parameter Handler. The manipulation of the argument namestartsWith leads to sql injection. The attack...

CVE-2023-3340

CVE-2023-3340 affects SourceCodester Online School Fees System 1.0, specifically the file ajx.php in the GET Parameter Handler. The issue is a SQL injection caused by manipulating the name_startsWith argument, which can be exploited remotely; the vulnerability has been disclosed publicly. Multipl...

CVE-2023-3189

A vulnerability, which was classified as problematic, was found in SourceCodester Online School Fees System 1.0. This affects an unknown part of the file /paysystem/branch.php of the component POST Parameter Handler. The manipulation of the argument branch leads to cross site scripting. It is...

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Online School Fees System 1.0. This affects an unknown part of the file /paysystem/branch.php of the component POST Parameter Handler. The manipulation of the argument branch leads to cross site scripting. It is...

CVE-2023-3189 SourceCodester Online School Fees System POST Parameter branch.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Online School Fees System 1.0. This affects an unknown part of the file /paysystem/branch.php of the component POST Parameter Handler. The manipulation of the argument branch leads to cross site scripting. It is...

CVE-2023-3189

CVE-2023-3189 affects SourceCodester Online School Fees System 1.0, via an XSS flaw in the POST Parameter Handler at /paysystem/branch.php (branch parameter). The vulnerability allows remote attackers to trigger cross-site scripting by manipulating the branch argument. Multiple connected sources ...