Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-49981 — School Fees Management System v1.0 - Incorrect Access Control - Directory Listing | Kitploit
Tools/GitHubGitHub/geraldoalcantara/cve-2023-49981
Vulnerability AnalysisInformation GatheringWeb SecurityPenetration TestingMisconfiguration
GitHubgeraldoalcantara/cve-2023-49981

CVE-2023-49981

School Fees Management System v1.0 - Incorrect Access Control - Directory Listing

View Repository
2 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-49981

School Fees Management System v1.0 - Incorrect Access Control - Directory Listing

Description: A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authentication/authorization.

Vulnerable Product Version: School Fees Management System v1.0
CVE Author: Geraldo Alcântara
Date: 28/11/2023
Confirmed on: 19/12/2023
CVE: CVE-2023-49981
Tested on: Windows

Steps to reproduce:

Affected Components:

/ci_fms/database/
/ci_fms/uploads/
/ci_fms/assets/
/ci_fms/assets/backend/

  1. To exploit the vulnerability, an attacker simply needs to navigate to the directories. Navigate to URL: http://{IP}/ci_fms/database/, http://{IP}/ci_fms/uploads/ or http://{IP}/ci_fms/assets/. I found out that many important files of application can be accessed directly from this directory listing.

Discoverer(s)/Credits:
Geraldo Alcântara

Download Tool