CVE-2025-25614

Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation, which allows teachers to update the personal data of fellow teachers...

CVE-2025-25614

Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation, which allows teachers to update the personal data of fellow teachers...

CVE-2025-25620: Improper Neutralization of Input During Web Page Generation

Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...

CVE-2025-25616: Improper Access Control

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?examruleid=1...

CVE-2025-25615

Unifiedtransform 2.0 is vulnerable to an Incorrect Access Control flaw that allows users with teacher-level privileges to view attendance lists for all class sections. The root cause is a failure to restrict access to the attendance data, which should be limited to administrators. An attacker can...

CVE-2025-25620

Unifiedtransform v2.0 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability within the Create assignment function. An attacker with Teacher privileges can exploit this by creating an assignment and uploading a PDF file containing a malicious XSS payload. When other users, such as tho...

CVE-2025-25620

Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...

CVE-2025-25616

The open-source school management software Unifiedtransform version 2.0 is vulnerable to Incorrect Access Control (CWE-284). This flaw allows students to bypass authorization to modify exam rules via the /exams/edit-rule?exam_rule_id=1 endpoint. By manipulating the exam_rule_id parameter, an atta...

CVE-2025-25617

Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus...

CVE-2025-25617

Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus...

CVE-2025-25617

Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus...

CVE-2025-25617

Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus...

CVE-2025-25617: Improper Access Control

Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus...

CVE-2025-25617

The open-source school management software Unifiedtransform 2.X is vulnerable to Incorrect Access Control , which enables Privilege Escalation . Specifically, a user with Teacher privileges can access the /syllabus/create endpoint to create syllabus entries—a functionality intended exclusively fo...

Unifiedtransform 访问控制错误漏洞

Unifiedtransform is an open source school management software from Sourceforge Open Source. It allows for comprehensive and efficient management of school operations. A security vulnerability exists in Unifiedtransform 2.X. The vulnerability stems from improper access control and could lead to...

CVE-2025-25617

Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus...

PT-2025-9910 · Unknown · Unifiedtransform

Name of the Vulnerable Software and Affected Versions: Unifiedtransform version 2.0 Description: The issue is related to incorrect access control in Unifiedtransform, leading to privilege escalation. This allows teachers to update the personal data of fellow teachers. Recommendations: For...

Exploit for Cross-site Scripting in Changeweb Unifiedtransform

CVE-2025-25620 Unifiedtransform v2.0 is vulnerable to Stored...

PT-2025-9872 · Unknown · Unifiedtransform

Name of the Vulnerable Software and Affected Versions: Unifiedtransform versions 2.X Description: The issue allows teachers to take attendance of fellow teachers through the endpoint "/courses/teacher/index?teacher id=2&s...". This is due to incorrect access control. Recommendations: For...

PT-2025-9870 · Unknown · Unifiedtransform

Name of the Vulnerable Software and Affected Versions: Unifiedtransform version 2.0 Description: The issue is related to incorrect access control in Unifiedtransform 2.0, which leads to privilege escalation. This allows teachers to change the section name and room number, permissions that should ...