PT-2025-49420

CVE-2025-14206

Publicado

2025-12-08

Atualizado

2026-10-14

Descrição por

CVSS 3.1

7.5

Alta

MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Clearance System version 1.0

Description A flaw exists in the system that could allow improper authorization. This issue stems from manipulating the ID argument within an unknown function of the file '/Admin/delete-fee.php' of the Fee Table Handler component. The attack can be carried out remotely, and details of the exploit have been publicly disclosed.

Recommendations Apply a fix to address the improper authorization issue in the file '/Admin/delete-fee.php'.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-285: Improper Authorization

CWE-266: Incorrect Privilege Assignment

Identificadores relacionados