PT-2025-49420

CVE-2025-14206

Published

2025-12-08

Updated

2026-10-14

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Clearance System version 1.0

Description A flaw exists in the system that could allow improper authorization. This issue stems from manipulating the ID argument within an unknown function of the file '/Admin/delete-fee.php' of the Fee Table Handler component. The attack can be carried out remotely, and details of the exploit have been publicly disclosed.

Recommendations Apply a fix to address the improper authorization issue in the file '/Admin/delete-fee.php'.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-285: Improper Authorization

CWE-266: Incorrect Privilege Assignment

Related identifiers