CVE-2024-12306: Improper Access Control

Multiple access control vulnerabilities in Unifiedtransform version 2.0 and potentially earlier versions allow unauthorized access to personal information of students and teachers. The vulnerabilities include both function-level access control issues in list viewing endpoints and object-level...

PT-2024-17537 · Unknown · Unifiedtransform

Name of the Vulnerable Software and Affected Versions: Unifiedtransform versions 2.0 and earlier Description: A function-level access control issue exists due to missing access control checks in the student editing functionality, allowing teachers to modify student personal data without proper...

Unifiedtransform security vulnerability

Unifiedtransform is an open source school management software from Sourceforge Open Source. It allows for comprehensive and efficient management of school operations. A security vulnerability exists in Unifiedtransform version 2.0 and prior versions, which stems from multiple access control...

PT-2024-17535

Name of the Vulnerable Software and Affected Versions Unifiedtransform versions 2.0 and earlier Description An object-level access control issue allows unauthorized access to student grades. A malicious student user can view grades of other students by manipulating the student id parameter in the...

Unifiedtransform security vulnerability

Unifiedtransform is an open source school management software from the individual developer Hasib Mahmud. A security vulnerability exists in Unifiedtransform version 2.0 and prior versions that stems from a functional-level access control vulnerability that allows teachers to modify personal...

CVE-2024-12307: Improper Access Control

A function-level access control vulnerability in Unifiedtransform version 2.0 and potentially earlier versions allows teachers to modify student personal data without proper authorization. The vulnerability exists due to missing access control checks in the student editing functionality. At the...

CVE-2024-27665

Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting XSS via file upload feature in Syllabus module...

CVE-2024-27665

Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting XSS via file upload feature in Syllabus module...

CVE-2024-27665: Improper Neutralization of Input During Web Page Generation

Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting XSS via file upload feature in Syllabus module...

CVE-2024-27665

Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting XSS via file upload feature in Syllabus module...

Unifiedtransform security vulnerability

Unifiedtransform is an open source school management software from Sourceforge Open Source. It allows for comprehensive and efficient management of school operations. A security vulnerability exists in Unifiedtransform v2.X, which stems from vulnerability to stored cross-site scripting XSS attack...

Exploit for CVE-2024-27665

CVE-2024-27665 Unifiedtransform v2.X is vulnerable to Stored...

PT-2024-21983 · Unknown · Unifiedtransform

Name of the Vulnerable Software and Affected Versions: Unifiedtransform versions 2.X Description: The issue is related to Stored Cross-Site Scripting XSS via the file upload feature in the Syllabus module. This allows for malicious scripts to be stored and executed on the server. No information i...

Cross-Site Request Forgery (CSRF) in changeweb/unifiedtransform

✍️ Description When you don't set the SameSite attribute of cookies the browsers have special act in front of this issue.I mean set default value on it chrome and chromium based browsers set the attribute "Lax" that mean if you do add/delete/alter operation in a get HTTP request then your site mor...