CVE-2026-9484: SourceCodester Student Grades Management System classroom.php removeStudentFromClassroom improper authorization
A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected by this vulnerability is the function getClassroomStudents/removeStudentFromClassroom of the file classroom.php. Executing a manipulation of the argument classroomid can lead to improper authorization. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9484?
CVE-2026-9484 has a medium severity rating of 6.3.
How do I fix CVE-2026-9484?
To fix CVE-2026-9484, ensure proper authorization checks are implemented in the removeStudentFromClassroom function.
What type of vulnerability is CVE-2026-9484?
CVE-2026-9484 is an improper authorization vulnerability found in the SourceCodester Student Grades Management System.
What component is affected by CVE-2026-9484?
CVE-2026-9484 affects the classroom.php file, specifically the getClassroomStudents/removeStudentFromClassroom functions.
What could be the consequence of exploiting CVE-2026-9484?
Exploiting CVE-2026-9484 could allow an attacker to manipulate the classroom_id argument and gain unauthorized access to classroom functionalities.