Executive Summary

This vulnerability exists in the SourceCodester Online Student Clearance System 1.0, specifically in the /Admin/delete-fee.php file within the Fee Table Handler component. By manipulating the ID argument, an attacker can perform improper authorization, potentially allowing unauthorized actions. The attack can be executed remotely and the exploit has been publicly disclosed.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to improper authorization, which means an attacker could perform actions they are not permitted to do, such as deleting or modifying fee records. This can compromise the integrity and availability of the system's data and operations.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by checking for unauthorized access attempts to the URL /Admin/delete-fee.php with an ID parameter. You can monitor web server logs for requests to /Admin/delete-fee.php?id= followed by any value. Additionally, using Google dorking with queries like "inurl:Admin/delete-fee.php" can help identify exposed vulnerable endpoints. On your system, you can use commands like `grep 'delete-fee.php?id=' /var/log/apache2/access.log` (or the equivalent log file) to find suspicious access attempts. Monitoring for DELETE SQL queries without proper authentication in application logs can also help detect exploitation attempts. [2, 1]

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include implementing strict authentication and authorization checks at the start of the /Admin/delete-fee.php script to ensure that only authenticated users with appropriate administrative privileges can perform deletion operations. This prevents unauthorized users from invoking the deletion functionality. If possible, replace the affected component with an alternative product that does not have this vulnerability. Additionally, restrict access to the /Admin directory via web server configuration to trusted users only. [1, 3, 2]

Useful 0 Not Useful 0