Improper Access Control

francoisjacquet/rosariosis is vulnerable to Improper Access Control. The vulnerability exists because the UploadAssignmentTeacherFile function in StudentAssignments.fnc.php does not properly grant access to content and functions for some users, which allows an attacker to retrieve and upload any...