Skip to content
OpenAdvisories

Vendor

schule111

3 known vulnerabilities.

Products

Schule 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.6
    CVE-2025-48375

    Schule Missing Rate Limiting on OTP Email Requests – Susceptible to Abuse & DoS

    Schule is open-source school management system software. Prior to version 1.0.1, the file forgot_password.php (or equivalent endpoint responsible for email-based OTP generation) lacks proper rate limiting controls, allowing attackers to abuse the OTP request …

    schule111 Schule
  • Medium 6.6
    CVE-2025-48373

    Schule Has Client-Side Role-Based Access Control (RBAC) Bypass Vulnerability

    Schule is open-source school management system software. The application relies on client-side JavaScript (index.js) to redirect users to different panels based on their role. Prior to version 1.0.1, this implementation poses a serious security risk because i…

    schule111 Schule
  • Medium 6.6
    CVE-2025-48372

    Schule Has Insecure OTP Length, is Susceptible to Brute-Force Attacks

    Schule is open-source school management system software. The generateOTP() function generates a 4-digit numeric One-Time Password (OTP). Prior to version 1.0.1, even if a secure random number generator is used, the short length and limited range (1000–9999) r…

    schule111 Schule