CVE-2022-2674

CVE-2022-2674 affects SourceCodester Best Fee Management System: the login function in admin_class.php is vulnerable to SQL injection via the username parameter. This can be exploited remotely, with public exploit availability noted. Impact is described as critical in the CVE entry. No remediatio...

CVE-2023-3599

SourceCodester Best Fee Management System 1.0 is affected by CVE-2023-3599 in the function save_user of admin_class.php (Add User Handler). The issue enables improper access controls and can be exploited remotely; multiple sources indicate the exploit has been disclosed publicly. Constraints vary...