CVE-2026-9484— SourceCodester Student Grades Management System classroom.php removeStudentFromClassroom improper authorization
Possible ATT&CK Techniques 1AI
T1078 · Valid AccountsAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SourceCodester | Student Grades Management System | 1.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-9484
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SourceCodester Student Grades Management System classroom.php removeStudentFromClassroom improper authorization
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected by this vulnerability is the function getClassroomStudents/removeStudentFromClassroom of the file classroom.php. Executing a manipulation of the argument classroom_id can lead to improper authorization. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
SourceCodester Student Grades Management System 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SourceCodester Student Grades Management System是SourceCodester开源的一个学生成绩管理系统。 SourceCodester Student Grades Management System 1.0版本存在授权问题漏洞，该漏洞源于文件classroom.php中函数getClassroomStudents/removeStudentFromClassroom对参数classroom_id的操作，可能导致授权不当。攻击者可远程发起攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SourceCodester | Student Grades Management System | 1.0 | cpe:2.3:a:sourcecodester:student_grades_management_system:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-9484
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-9484
请登录查看更多情报信息。
Other References for CVE-2026-9484 (2)
Same Patch Batch · SourceCodester · 2026-05-25 · 12 CVEs total
| CVE-2026-9447 | 7.3 HIGH | SourceCodester Simple POS and Inventory System search.php sql injection |
| CVE-2026-9483 | 6.3 MEDIUM | SourceCodester Student Grades Management System grades.php improper authorization |
| CVE-2026-9445 | 6.3 MEDIUM | SourceCodester Simple POS and Inventory System File Extension addproduct.php unrestricted |
| CVE-2026-9412 | 6.3 MEDIUM | SourceCodester Indian Invoicing System Backend Endpoint access control |
| CVE-2026-9411 | 6.3 MEDIUM | SourceCodester Indian Invoicing System Invoice Generation IGST_Invoice.php sql injection |
| CVE-2026-9446 | 4.7 MEDIUM | SourceCodester Simple POS and Inventory System edit_customer.php sql injection |
| CVE-2026-9444 | 4.7 MEDIUM | SourceCodester Simple POS and Inventory System GET Parameter deleteproduct.php delete sql |
| CVE-2026-9486 | 4.3 MEDIUM | SourceCodester Student Grades Management System cross-site request forgery |
| CVE-2026-9413 | 4.3 MEDIUM | SourceCodester Indian Invoicing System category.php cross site scripting |
| CVE-2026-9485 | 3.5 LOW | SourceCodester Student Grades Management System students.php cross site scripting |
| CVE-2026-9414 | 3.5 LOW | SourceCodester Indian Invoicing System Invoice Template Render Database-Backed add_order.p |
IV. Related Vulnerabilities
Same product: Student Grades Management System
- CVE-2026-9486
SourceCodester Student Grades Management System cross-site r - CVE-2026-9485
SourceCodester Student Grades Management System students.php - CVE-2026-9483
SourceCodester Student Grades Management System grades.php i - CVE-2025-13349
SourceCodester Student Grades Management System Add New Grad - CVE-2025-12332
SourceCodester Student Grades Management System admin.php de
Same vendor: SourceCodester
- CVE-2026-75151
SourceCodester Onlne Examination & Learning Management Syste - CVE-2026-75080
SourceCodester Class and Exam Timetabling System edit_subjec - CVE-2026-75079
SourceCodester Class and Exam Timetabling System edit_subjec - CVE-2026-75078
SourceCodester Class and Exam Timetabling System BSHRM1.php - CVE-2026-75077
SourceCodester Class and Exam Timetabling System BSCE2.php c
Same weakness: CWE-285
- CVE-2026-55166
Lemur: any SSO-authenticated user achieves AWS IAM compromis - CVE-2026-48744
Saleor: Anonymous users can modify channel settings via `cha - CVE-2026-19608
Keycloak-services: keycloak-services: name-only group claims - CVE-2024-14045
OpenBoxes Product Supplier Edit Controller RoleInterceptor.g - CVE-2026-19986
Adblock for Youtube Extension Event Listener contentscript.j
V. Comments for CVE-2026-9484
No comments yet