CVE-2025-70147

The ProjectWorlds Online Time Table Generator 1.0 is susceptible to an authentication bypass vulnerability. Missing authentication in the /admin/student.php and /admin/teacher.php endpoints allows remote attackers to perform direct HTTP GET requests without a valid session. This vulnerability ena...