CVE-2024-7169

MEDIUM

School Fees Payment System 1.0 - Cross-Site Request Forgery via /ajax.php

Title source: llm

Description

A vulnerability classified as problematic has been found in SourceCodester School Fees Payment System 1.0. This affects an unknown part of the file /ajax.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272583.

References (4)

Core 4

Core References

Third Party Advisory third-party-advisory

https://vuldb.com/?submit.380185

Exploit exploit

https://gist.github.com/topsky979/421c916be6ab09dc990896b07185ec89

Permissions Required, Third Party Advisory vdb-entry

https://vuldb.com/?id.272583

Permissions Required, Third Party Advisory signature permissions-required

https://vuldb.com/?ctiid.272583

Scores

CVSS v3 4.3

EPSS 0.0013

EPSS Percentile 31.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-352

Status published

Products (1)

oretnom23/school_fees_payment_system 1.0

Published Jul 28, 2024

Tracked Since Feb 18, 2026