Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-41252 EUVD-2024-38989GHSA-xmx3-9jpm-34m4

An Incorrect Access Control vulnerability was found in /smsa/admin_student_register_approval.php and /smsa/admin_student_register_approval_…

Published Aug 7, 2024 · Updated Aug 7, 2024 · Assigned by mitre

Description

An Incorrect Access Control vulnerability was found in /smsa/admin_student_register_approval.php and /smsa/admin_student_register_approval_submit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view and approve student registration.

References