A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://github.com/rassec2/dbcve/issues/8 Exploit, Issue Tracking, Mitigation, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.5 · senior-walterNVD modified 2026-10-14 22:10
Affected (CPE criteria) 1
cpe:2.3:a:senior-walter:online_student_clearance_system:1.0:*:*:*:*:*:*:*
References 5
- https://github.com/rassec2/dbcve/issues/8 Exploit, Issue Tracking, Mitigation, Third Party Advisory
- https://vuldb.com/?ctiid.334649 Permissions Required, VDB Entry
- https://vuldb.com/?id.334649 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.700465 Third Party Advisory, VDB Entry
- https://www.sourcecodester.com/ Product