Threats tagged 'ghsa-wjrw-j976-xf8g'

SourceCodester Class and Exam Timetabling System version 1.0 contains an authorization vulnerability in the /admin/edit_user_account.php component. An attacker with limited privileges can manipulate the id or username parameters to modify user accounts without proper authorization. The vulnerability is remotely exploitable. No patch or official remediation is currently available.