CVE-2025-25616

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?examruleid=1...

CVE-2025-25616

creationtimestamp| type| source ---|---|--- 2025-03-10 14:38:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7000 2025-03-10 15:40:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljzv7jbtiz2j 2025-03-10 16:31:53+00:00| seen|...

CVE-2025-25616

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?examruleid=1...

CVE-2025-25616

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?examruleid=1...

CVE-2025-25616

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?examruleid=1...

CVE-2025-25616

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?examruleid=1...

CVE-2025-25616

Unifiedtransform version 2.0 , an open-source school management software, is vulnerable to Incorrect Access Control in the /exams/edit-rule?exam_rule_id=1 endpoint. This flaw allows users with Student privileges to modify exam rules, an action intended only for administrators. Attackers can manip...