CVE-2023-49982

Description

Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and deleting user accounts.

References

https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html

https://github.com/geraldoalcantara/CVE-2023-49982

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS