CVE Intelligence

Vulnerabilidades do SourceCodester School Registration and Fee System

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam SourceCodester School Registration and Fee System: 4 registro(s), com versões afetadas e correções.

CVE-2026-90526 Alta · 7.3 CWE-74 13/09/2026
SourceCodester School Registration and Fee System save_class.php sql injection
A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/save_class.php. The manipulation of the argument Category leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
CVE-2026-90516 Alta · 7.3 CWE-74 13/09/2026
SourceCodester School Registration and Fee System pay_report.php sql injection
A vulnerability was found in SourceCodester School Registration and Fee System 1.0. The affected element is an unknown function of the file /bilal/normal/pay_report.php. Performing a manipulation of the argument period results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.
CVE-2026-90515 Alta · 7.3 CWE-74 13/09/2026
SourceCodester School Registration and Fee System delete_stud.php sql injection
A vulnerability was determined in SourceCodester School Registration and Fee System 1.0. The impacted element is an unknown function of the file /bilal/normal/delete_stud.php. Executing a manipulation of the argument selector[] can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2026-90514 Alta · 7.3 CWE-74 13/09/2026
SourceCodester School Registration and Fee System save_stud.php sql injection
A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/save_stud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.