CVE-2025-5971

The CVE-2025-5971 entry concerns code-projects School Fees Payment System v1.0 with an SQL injection in the /ajx.php file, caused by unsafely handling the name_startsWith parameter. The vulnerability can be exploited remotely and may lead to data disclosure or modification as described across CNV...

CVE-2025-5979

CVE-2025-5979 affects code-projects School Fees Payment System 1.0. Multiple connected sources confirm a SQL injection vulnerability in the /branch.php file triggered by manipulating the ID argument, with remote attack potential and publicly disclosed exploit details. Sources from CNVD/CNNVD and ...

CVE-2025-5985

CVE-2025-5985 affects the code-projects School Fees Payment System v1.0. The connected sources indicate a critical issue described as an improper authentication vulnerability that can be exploited remotely, with the exploit disclosed publicly. The vulnerability is associated with unknown function...

CVE-2025-5977

CVE-2025-5977 affects code-projects School Fees Payment System 1.0. The vulnerability is a SQL injection in the file /datatable.php caused by unsafely handling the sSortDir_0 parameter. It can be exploited remotely and may lead to unauthorized data access or modification; multiple sources describ...

CVE-2025-6569

The CVE-2025-6569 entry applies to code-projects School Fees Payment System 1.0. Affected is the /student.php functionality where manipulating parameters (sname, contact, about, emailid, transcation_remark) triggers cross-site scripting. The vulnerability can be exploited remotely and public expl...

CVE-2025-6341

The CVE-2025-6341 entry concerns code-projects School Fees Payment System 1.0, a web application vulnerability leading to cross-site request forgery. Reports across multiple sources (NVD, Red Hat, CNVD, CNVD CNVD, PT Security) describe a CSRF issue arising from insufficient validation of requests...

CVE-2025-6403

Code-Projects School Fees Payment System 1.0 is affected by a SQL injection in /student.php via the ID parameter. The root cause is improper handling of the ID argument, enabling remote attackers to manipulate SQL commands, potentially leading to data theft or modification. Several connected sour...

CVE-2025-6340

CVE-2025-6340 affects code-projects School Fees Payment System 1.0. The vulnerability is a cross-site scripting flaw in the /branch.php file, triggered by manipulating the Branch/Address/Detail parameter. It can be exploited remotely and exploit code has been publicly disclosed. Affected componen...

CVE-2025-6473

CVE-2025-6473 affects the code-projects School Fees Payment System 1.0, with the vulnerability located in /fees.php. The issue arises from improper handling of the input parameter transcation_remark (also reported as translation_remark), leading to cross-site scripting. The vulnerability can be e...