PT-2026-79766 · Sourcecodester · Class/Exam Timetabling System
CVSS v2.0
5.5
Medium
| Vector | AV:N/AC:L/Au:S/C:N/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
SourceCodester Class and Exam Timetabling System version 1.0
Description
An improper authorization issue exists within the User Account Update component in the file
/admin/edit user account.php. A remote attacker can manipulate the id/username arguments to bypass authorization controls.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Incorrect Privilege Assignment
Improper Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Class/Exam Timetabling System