Vulnerability Details CVE-2023-49982
Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and deleting user accounts.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 53.1%
CVSS Severity
CVSS v3 Score 8.8
References
- https://github.com/geraldoalcantara/CVE-2023-49982
- https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html
- https://github.com/geraldoalcantara/CVE-2023-49982
- https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html
Products affected by CVE-2023-49982
-
cpe:2.3:a:oretnom23:school_fees_management_system:1.0