Vulnerability Description
A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function delete_forum/delete_career/delete_comment/delete_gallery/delete_event of the file admin/admin_class.php of the component Delete Handler. Executing manipulation of the argument ID can lead to missing authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oretnom23 | Alumni Management System | 1.0 |
Related Weaknesses (CWE)
References
- https://hackmd.io/@mlgzackfly/SourceCodesterExploitThird Party Advisory
- https://vuldb.com/?ctiid.333041Permissions RequiredVDB Entry
- https://vuldb.com/?id.333041Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.694826Third Party AdvisoryVDB Entry
- https://www.sourcecodester.com/Product
FAQ
What is CVE-2025-13468?
CVE-2025-13468 is a vulnerability with a CVSS score of 5.4 (MEDIUM). A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function delete_forum/delete_career/delete_comment/delete_gallery/delete_event of the file admin/a...
How severe is CVE-2025-13468?
CVE-2025-13468 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-13468?
Check the references section above for vendor advisories and patch information. Affected products include: Oretnom23 Alumni Management System.