Executive Summary

This vulnerability exists in the yashpokharna2555 StudentManagementSystem, specifically in an unknown function within the file courseDel.php. It involves manipulation of the argument ID, which leads to improper control of resource identifiers. This means an attacker can potentially manipulate which resources are accessed or deleted by altering the ID parameter.

The attack can be performed remotely, and the exploit has been made public, increasing the risk of exploitation. The product uses a rolling release system, so specific affected versions are not disclosed.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability allows an attacker to improperly control resource identifiers by manipulating the ID argument. This can lead to unauthorized actions such as deleting or accessing resources that should be protected.

Since the attack can be performed remotely and the exploit is public, it increases the risk of unauthorized data modification or deletion, potentially impacting the integrity and availability of the system's data.

Useful 0 Not Useful 0