CVE-2023-3189

CVE-2023-3189 affects SourceCodester Online School Fees System 1.0, via an XSS flaw in the POST Parameter Handler at /paysystem/branch.php (branch parameter). The vulnerability allows remote attackers to trigger cross-site scripting by manipulating the branch argument. Multiple connected sources ...

CVE-2023-3381

CVE-2023-3381 affects SourceCodester Online School Fees System 1.0. The vulnerability is a cross-site scripting issue in the GET Parameter Handler, specifically the /paysystem/datatable.php file where manipulation of the doj argument can trigger XSS. It is exploitable remotely and has been disclo...

CVE-2023-3340

CVE-2023-3340 affects SourceCodester Online School Fees System 1.0, specifically the file ajx.php in the GET Parameter Handler. The issue is a SQL injection caused by manipulating the name_startsWith argument, which can be exploited remotely; the vulnerability has been disclosed publicly. Multipl...