A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function delete_forum/delete_career/delete_comment/delete_gallery/delete_event of the file admin/admin_class.php of the component Delete Handler. Executing manipulation of the argument ID can lead to missing authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.
References
| Link | Resource |
|---|---|
| https://hackmd.io/@mlgzackfly/SourceCodester | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.333041 | Permissions Required VDB Entry |
| https://vuldb.com/?id.333041 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.694826 | Third Party Advisory VDB Entry |
| https://www.sourcecodester.com/ | Product |
Configurations
History
21 Nov 2025, 20:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://hackmd.io/@mlgzackfly/SourceCodester - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.333041 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.333041 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.694826 - Third Party Advisory, VDB Entry | |
| References | () https://www.sourcecodester.com/ - Product | |
| First Time |
Oretnom23 alumni Management System
Oretnom23 |
|
| CPE | cpe:2.3:a:oretnom23:alumni_management_system:1.0:*:*:*:*:*:*:* |
20 Nov 2025, 15:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-20 15:17
Updated : 2025-11-21 20:01
NVD link : CVE-2025-13468
Mitre link : CVE-2025-13468
CVE.ORG link : CVE-2025-13468
JSON object : View
Products Affected
oretnom23
- alumni_management_system