CVE-2025-25621

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teachers. This affected endpoint is /courses/teacher/index?teacherid=2id=1...

CVE-2025-25621

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teachers. This affected endpoint is /courses/teacher/index?teacherid=2&semesterid=1...

CVE-2025-25621

creationtimestamp| type| source ---|---|--- 2025-03-17 14:52:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7783 2025-03-17 17:28:00+00:00| seen| https://t.me/cvedetector/20471 2025-03-17 17:45:52+00:00| seen|...

CVE-2025-25621

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teachers. This affected endpoint is /courses/teacher/index?teacherid=2&semesterid=1...

CVE-2025-25621

The Unifiedtransform school management software (v2.0) is vulnerable to Incorrect Access Control , allowing authenticated teachers to manipulate attendance records for other teachers. This occurs via the endpoint /courses/teacher/index?teacher_id=2&semester_id=1 by changing the teacher_id paramet...