Student Grades Management System vulnerabilities

In SourceCodester Student Grades Management System 1.0, an improper authorization vulnerability exists in the getClassroomStudents/removeStudentFromClassroom function of classroom.php. Manipulating the classroom_id argument leads to authorization bypass. The attack can be performed remotely, and the exploit is publicly available.

SourceCodester Student Grades Management System 1.0 has a vulnerability in grades.php where manipulation of the student_id argument leads to improper authorization. The attack can be performed remotely and the exploit is public.

A vulnerability in SourceCodester Student Grades Management System 1.0 affects the add_user function in /admin.php of the Manage Users Page component. Manipulation of first_name/last_name arguments causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed.