SourceCodester Student Grades Management System classroom.php removeStudentFromClassroom improper authorization

Vulnerability

In SourceCodester Student Grades Management System version 1.0, the functions getClassroomStudents and removeStudentFromClassroom in classroom.php fail to properly verify authorization when processing the classroom_id argument. An attacker can manipulate this parameter to access or modify classroom records without proper privileges. The vulnerability is present in the publicly available source code [1].

Exploitation

An attacker can exploit this vulnerability remotely without authentication. By sending crafted HTTP requests to classroom.php with a manipulated classroom_id parameter, the attacker can invoke the affected functions. The exploit has been publicly disclosed and may be utilized [2].

Impact

Successful exploitation leads to unauthorized access to classroom student lists and the ability to remove students from classrooms. This results in improper authorization, potentially compromising the integrity and confidentiality of student grade management data.

Mitigation

As of the publication date, no official patch has been released by SourceCodester. Users should consider implementing input validation and authorization checks on the classroom_id parameter. The vendor has not announced a fixed version. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog.