CVE-2025-60305

HighCVSS 8.8

Published: 10/10/2025(UTC)Updated: 05/11/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

36th percentile - higher than 36% of all known CVEs

Summary

SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control due to a logic flaw. Low privilege users can forge high privileged sessions and perform sensitive operations.

Risk Assessment

The organization is at risk of unauthorized access to administrative functions, potentially leading to breach of student data confidentiality and integrity, as well as disruption of clearance processes.

Recommendation

Immediately update the system to the latest version or apply the vendor's patch. In the meantime, restrict system access to trusted users and implement additional authentication mechanisms.

Other vulnerabilities in SourceCodester Online Student Clearance System

CVE-2025-14206Medium
A vulnerability was determined in SourceCodester Online Student Clearance System 1.0 in an unknown function of the file /Admin/delete-fee.php of the Fee Table Handler component. Manipulation of the ID argument leads to improper authorization. The attack may be performed remotely, and the exploit has been publicly disclosed and may be utilized.

Original NVD description (English source)

SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS