PT-2022-13776

Name of the Vulnerable Software and Affected Versions School Club Application System version 1.0 Description A critical issue was found in the system, affecting requests to the "/scas/classes/Users.php?f=save user" endpoint. The manipulation with a POST request leads to privilege escalation. The...

CVE-2022-1287: Improper Control of Resource Identifiers

A vulnerability classified as critical was found in School Club Application System 1.0. This vulnerability affects a request to the file /scas/classes/Users.php?f=saveuser. The manipulation with a POST request leads to privilege escalation. The attack can be initiated remotely and does not requir...