CVE-2025-25617: Improper Access Control

Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus...

CVE-2025-25617

Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus...

CVE-2025-25617

The open-source school management software Unifiedtransform 2.X is vulnerable to Incorrect Access Control , which enables Privilege Escalation . Specifically, a user with Teacher privileges can access the /syllabus/create endpoint to create syllabus entries—a functionality intended exclusively fo...

PT-2025-9910 · Unknown · Unifiedtransform

Name of the Vulnerable Software and Affected Versions: Unifiedtransform version 2.0 Description: The issue is related to incorrect access control in Unifiedtransform, leading to privilege escalation. This allows teachers to update the personal data of fellow teachers. Recommendations: For...

Exploit for Cross-site Scripting in Changeweb Unifiedtransform

CVE-2025-25620 Unifiedtransform v2.0 is vulnerable to Stored...

PT-2025-9867

Name of the Vulnerable Software and Affected Versions Unifiedtransform versions 2.X Description The issue allows teachers to view the attendance list for all class sections due to incorrect access control. Recommendations For Unifiedtransform version 2.X, consider restricting access to the...

PT-2025-9868

Name of the Vulnerable Software and Affected Versions Unifiedtransform versions 2.X Description The issue allows students to modify exam rules due to incorrect access control. The affected endpoint is "/exams/edit-rule?exam rule id=1". Recommendations For Unifiedtransform version 2.X, restrict...

PT-2025-9869

Name of the Vulnerable Software and Affected Versions Unifiedtransform versions 2.X Description The issue is related to Incorrect Access Control in Unifiedtransform, leading to Privilege Escalation. This allows teachers to create syllabus, which is an unauthorized action. Recommendations For...

PT-2025-9870 · Unknown · Unifiedtransform

Name of the Vulnerable Software and Affected Versions: Unifiedtransform version 2.0 Description: The issue is related to incorrect access control in Unifiedtransform 2.0, which leads to privilege escalation. This allows teachers to change the section name and room number, permissions that should ...

PT-2025-9872 · Unknown · Unifiedtransform

Name of the Vulnerable Software and Affected Versions: Unifiedtransform versions 2.X Description: The issue allows teachers to take attendance of fellow teachers through the endpoint "/courses/teacher/index?teacher id=2&s...". This is due to incorrect access control. Recommendations: For...

PT-2025-9871 · Unknown · Unifiedtransform

Name of the Vulnerable Software and Affected Versions: Unifiedtransform version 2.0 Description: The issue is related to Cross Site Scripting XSS in the Create assignment function, allowing attackers to execute malicious scripts in the context of other users. Recommendations: For Unifiedtransform...

CVE-2024-53573

Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access and manipulate endpoints intended exclusively for administrative use. This issue specifically affects teacher/edit/id...

CVE-2024-53573

Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access and manipulate endpoints intended exclusively for administrative use. This issue specifically affects teacher/edit/id...

CVE-2024-53573

Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access and manipulate endpoints intended exclusively for administrative use. This issue specifically affects teacher/edit/id...

CVE-2024-53573

Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access and manipulate endpoints intended exclusively for administrative use. This issue specifically affects teacher/edit/id...

CVE-2024-53573

Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access and manipulate endpoints intended exclusively for administrative use. This issue specifically affects teacher/edit/id...

CVE-2024-53573

Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access and manipulate endpoints intended exclusively for administrative use. This issue specifically affects teacher/edit/id...

CVE-2024-53573

Unifiedtransform v2.X , an open-source school management software, is vulnerable to Incorrect Access Control (CWE-284). The flaw allows unauthorized users to access and manipulate endpoints reserved for administrative use, specifically affecting the teacher/edit/{id} endpoint. This could lead to ...

CVE-2024-53573: Improper Access Control

Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access and manipulate endpoints intended exclusively for administrative use. This issue specifically affects teacher/edit/id...

Unifiedtransform 安全漏洞

Unifiedtransform is an open source school management software from the individual developer Hasib Mahmud. A security vulnerability exists in Unifiedtransform v2.X. The vulnerability stems from improper access control, which allows unauthorized users to access and operate the management endpoints...