| शीर्षक | CampCodes School Management Software 1.0 Improper Privilege Management |
|---|
| विवरण | Vendor and Product Information:
Vendor: CampCodes
Product: School Management Software
Product URL: https://www.campcodes.com/downloads/school-management-software-in-php-mysql-full-source-code/
Vulnerability Name: Sensitive Super Admin Data Exposure and Unauthorized Data Update via IDOR (Teacher Role to Super Admin Role)
Description:
It was observed that via IDOR a teacher can obtain the fetch the details of Super Admin which includes the admin’s sensitive Bank Account Details, Email ID, profile picture, Name Details etc. The teacher can further update the Super Admin’s account details such as Bank Account Details, Email ID, profile picture, name etc. This is a serious issue as a lower privilege user can manipulate and make modifications to super admin’s profile data. |
|---|
| स्रोत | ⚠️ https://github.com/KhukuriRimal/Vulnerabilities/blob/main/Sensitive%20Super%20Admin%20Data%20Exposure%20and%20Unauthorized%20Data%20Update%20via%20IDOR%20(Teacher%20Role%20to%20Super%20Admin%20Role).pdf |
|---|
| उपयोगकर्ता | khukuririmal (UID 80171) |
|---|
| सबमिशन | 22/01/2025 06:01 PM (1 वर्ष पहले) |
|---|
| संयम | 29/01/2025 06:12 PM (7 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 294012 [CampCodes School Management Software 1.0 Staff /edit-staff/ अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|