Vulnerability Details CVE-2023-49982
Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and deleting user accounts.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.1%
CVSS Severity
CVSS v3 Score 8.8
References
- https://github.com/geraldoalcantara/CVE-2023-49982
- https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html
- https://github.com/geraldoalcantara/CVE-2023-49982
- https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html
Products affected by CVE-2023-49982
-
cpe:2.3:a:oretnom23:school_fees_management_system:1.0