| 标题 | SourceCodester Student Grades Management System 1.0 Improper Access Controls |
|---|
| 描述 | A vulnerability was found in SourceCodester Student Grades Management System 1.0. It has been classified as problematic. Affected is the student list handler of the file classroom.php. The manipulation of the argument classroom_id leads to insecure direct object reference. It is possible to launch the attack remotely. The vendor was notified prior to public disclosure.
Affected Product URL:
https://www.sourcecodester.com/php/18408/student-grades-management-system-using-html-css-and-javascript-source-code.html
Note:
Please visit the GitHub address to download the zip file of the two vulnerability reports to your local machine. Use the password: abc123.. View the report |
|---|
| 用户 | GeekerA (UID 97423) |
|---|
| 提交 | 2026-04-27 11時47分 (5 月前) |
|---|
| 管理 | 2026-05-24 11時26分 (27 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 365465 [SourceCodester Student Grades Management System 1.0 classroom.php getClassroomStudents/removeStudentFromClassroom classroom_id 权限提升] |
|---|
| 积分 | 20 |
|---|