CVE-2025-14206

MediumCVSS 6.5

Published: 08/12/2025(UTC)Updated: 14/10/2026(UTC)Translated: 15/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

Summary

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0 in an unknown function of the file /Admin/delete-fee.php of the Fee Table Handler component. Manipulation of the ID argument leads to improper authorization. The attack may be performed remotely, and the exploit has been publicly disclosed and may be utilized.

Risk Assessment

A remote attacker can bypass authorization mechanisms and perform unauthorized operations, such as deleting data.

Recommendation

Update SourceCodester Online Student Clearance System to a later version if available, or apply mitigations (e.g., permission checks) until a fix is released.

Other vulnerabilities in SourceCodester Online Student Clearance System

CVE-2025-60305High
SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control due to a logic flaw. Low privilege users can forge high privileged sessions and perform sensitive operations.

Original NVD description (English source)

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS