Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-6341: School Fees Payment System 1.0: Unapproved Payments Through Fake Requests

CVE-2025-6341 · published 1 year ago

Summary

A security flaw in the School Fees Payment System 1.0 makes it possible for someone to trick users into making unauthorized payments. This could happen when a user clicks on a malicious link or button, which could lead to financial loss. Update the system to the latest version to fix this issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
fabian	school_fees_payment_system	1.0 `cpe:2.3:a:fabian:school_fees_payment_system:1.0:::::::*`

Original advisory text

A vulnerability classified as problematic was found in code-projects School Fees Payment System 1.0. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

References

https://code-projects.org/ Product
https://github.com/tuooo/CVE/issues/15 Exploit Issue Tracking Third Party Advisory
https://vuldb.com/?ctiid.313336 Permissions Required VDB Entry
https://vuldb.com/?id.313336 Third Party Advisory VDB Entry
https://vuldb.com/?submit.597023 Third Party Advisory VDB Entry

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

2.1 Low

Exploitation

<1% chance of attack within 30 days

Type

CWE-352Cross-Site Request Forgery (CSRF)

CWE-862Missing Authorization

Timeline

Published20 Jun 2025

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2025-6341 · NVD

Track software like this

Free during beta