提出 #814037: SourceCodester Student Grades Management System 1.0 Improper Access Controls情報

タイトルSourceCodester Student Grades Management System 1.0 Improper Access Controls
説明A vulnerability was found in SourceCodester Student Grades Management System 1.0. It has been classified as critical. Affected is the grade submission handler of the file grades.php. The manipulation of the argument student_id/classroom_id leads to insecure direct object reference. It is possible to launch the attack remotely. The vendor was notified prior to public disclosure. Affected Product URL: https://www.sourcecodester.com/php/18408/student-grades-management-system-using-html-css-and-javascript-source-code.html Note: Please visit the GitHub address to download the zip file of the two vulnerability reports to your local machine. Use the password: abc123.. View the report
ソース⚠️ https://github.com/Jack-MRJ/Student-Grades-Management-System-Vulnerability-Report
ユーザー
 GeekerA (UID 97423)
送信2026年04月27日 11:41 (1 月 ago)
モデレーション2026年05月24日 11:26 (27 days later)
ステータス承諾済み
VulDBエントリ365464 [SourceCodester Student Grades Management System 1.0 grades.php student_id 特権昇格]
ポイント20

Do you want to use VulDB in your project?

Use the official API to access entries easily!