Improper Authorization Vulnerability in SourceCodester Yoga Class Registration System

CVE-2024-7851

Summary

The Yoga Class Registration System by SourceCodester, version 1.0, contains a significant vulnerability in the Add User Handler functionality found in the /classes/Users.php?f=save file. This flaw allows attackers to manipulate the system and gain unauthorized access to user management functions. The vulnerability can be exploited remotely, making it especially critical for users of the affected system to implement security measures promptly. Given that this issue has been publicly disclosed, organizations using this software are strongly advised to assess their risk and apply necessary updates or patches to mitigate potential attacks.

References