| Title | SourceCodester Student Grades Management System 1.0 Improper Access Controls |
|---|
| Description | A vulnerability was found in SourceCodester Student Grades Management System 1.0. It has been classified as critical. Affected is the grade submission handler of the file grades.php. The manipulation of the argument student_id/classroom_id leads to insecure direct object reference. It is possible to launch the attack remotely. The vendor was notified prior to public disclosure.
Affected Product URL:
https://www.sourcecodester.com/php/18408/student-grades-management-system-using-html-css-and-javascript-source-code.html
Note:
Please visit the GitHub address to download the zip file of the two vulnerability reports to your local machine. Use the password: abc123.. View the report |
|---|
| Source | ⚠️ https://github.com/Jack-MRJ/Student-Grades-Management-System-Vulnerability-Report |
|---|
| User | GeekerA (UID 97423) |
|---|
| Submission | 04/27/2026 11:41 (3 months ago) |
|---|
| Moderation | 05/24/2026 11:26 (27 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 365464 [SourceCodester Student Grades Management System 1.0 grades.php student_id improper authorization] |
|---|
| Points | 20 |
|---|