Incorrect Access Control Vulnerability in SourceCodester Computer Laboratory Management System
CVE-2024-54818
Currently unrated
What is CVE-2024-54818?
The SourceCodester Computer Laboratory Management System version 1.0 is vulnerable to an incorrect access control issue, which can be exploited through the endpoint /php-lms/admin/?page=user/list. This vulnerability allows unauthorized users to gain access to restricted resources, potentially compromising sensitive information and system integrity. Proper checks should be implemented to restrict access to sensitive administrative functions.