279 matches found
CVE-2024-7166 SourceCodester School Fees Payment System receipt.php sql injection
A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been classified as critical. Affected is an unknown function of the file /receipt.php. The manipulation of the argument efid leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...
CVE-2024-7165 SourceCodester School Fees Payment System view_payment.php sql injection
A vulnerability was found in SourceCodester School Fees Payment System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewpayment.php. The manipulation of the argument efid leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-7165 SourceCodester School Fees Payment System view_payment.php sql injection
A vulnerability was found in SourceCodester School Fees Payment System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewpayment.php. The manipulation of the argument efid leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-7165
CVE-2024-7165 affects SourceCodester School Fees Payment System 1.0, via SQL injection in the /view_payment.php file caused by manipulating the ef_id parameter. The issue can be exploited remotely and an exploit has been disclosed publicly. Connected sources confirm the vulnerability details and ...
CVE-2024-7164
A vulnerability has been found in SourceCodester School Fees Payment System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The explo...
CVE-2024-7164
A vulnerability has been found in SourceCodester School Fees Payment System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The explo...
CVE-2024-7164 SourceCodester School Fees Payment System sql injection
A vulnerability has been found in SourceCodester School Fees Payment System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The explo...
CVE-2024-7164 SourceCodester School Fees Payment System sql injection
A vulnerability has been found in SourceCodester School Fees Payment System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The explo...
CVE-2024-7164
CVE-2024-7164 affects SourceCodester School Fees Payment System v1.0. The vulnerability is an SQL injection in the /ajax.php?action=login endpoint, triggered by manipulating the username parameter. Exploitation is remote and has been publicly disclosed. Data confidentiality, integrity, and availa...
SourceCodester School Fees Payment System SQL注入漏洞
SourceCodester School Fees Payment System is a school fees payment system. A SQL injection vulnerability exists in version 1.0 of the SourceCodester School Fees Payment System, which stems from an SQL injection vulnerability in the id parameter of the /managecourse.php file...
SourceCodester School Fees Payment System 安全漏洞
SourceCodester School Fees Payment System is a school fees payment system. A security vulnerability exists in version 1.0 of the SourceCodester School Fees Payment System due to an SQL injection vulnerability in the username parameter of the /ajax.php?action=login file...
PT-2024-38126 · Unknown · Sourcecodester School Fees Payment System
Name of the Vulnerable Software and Affected Versions: SourceCodester School Fees Payment System version 1.0 Description: A critical issue has been found in the system, affecting the /ajax.php?action=login file. The manipulation of the username argument leads to SQL injection. The attack can be...
SourceCodester School Fees Payment System SQL注入漏洞
SourceCodester School Fees Payment System is a school fees payment system. A SQL injection vulnerability exists in version 1.0 of the SourceCodester School Fees Payment System, which stems from an SQL injection vulnerability in the efid parameter of the /viewpayment.php file...
SourceCodester School Fees Payment System 跨站请求伪造漏洞
SourceCodester School Fees Payment System is a school fees payment system. A cross-site request forgery vulnerability exists in version 1.0 of the SourceCodester School Fees Payment System, which stems from the /ajax.php file containing a cross-site request forgery...
SourceCodester School Fees Payment System SQL注入漏洞
SourceCodester School Fees Payment System is a school fees payment system. A SQL injection vulnerability exists in version 1.0 of the SourceCodester School Fees Payment System, which stems from an SQL injection vulnerability in the efid parameter of the /receipt.php file...
SourceCodester School Fees Payment System SQL注入漏洞
SourceCodester School Fees Payment System is a school fees payment system. A SQL injection vulnerability exists in version 1.0 of the SourceCodester School Fees Payment System, which stems from an SQL injection vulnerability in the id parameter of the /manageuser.php file...
PT-2024-38131 · Unknown · Sourcecodester School Fees Payment System
Name of the Vulnerable Software and Affected Versions: SourceCodester School Fees Payment System version 1.0 Description: A problematic issue has been found in the system, affecting an unknown part of the file /ajax.php. This issue leads to cross-site request forgery and can be initiated remotely...
PT-2024-38129 · Unknown · Sourcecodester School Fees Payment System
Name of the Vulnerable Software and Affected Versions: SourceCodester School Fees Payment System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /manage course.php. The manipulation of the id argument leads to sql injection...
CVE-2023-49983
A cross-site scripting XSS vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...