Vulnerability · Published Dec 8, 2025 · Assigned by VulDB
CVE-2025-14206SourceCodester Online Student Clearance System Fee Table delete-fee.php improper authorization
Medium 6.5
In plain English
A medium-severity security flaw in Online Student Clearance System from SourceCodester. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).
Official description
A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Online Student Clearance System | 1.0 |
Weakness: CWE-285, CWE-266 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-334649 | SourceCodester Online Student Clearance System Fee Table delete-fee.php improper authorization vdb-entry, technical-description
- VDB-334649 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #700465 | Sourcecodester Online Student Clearance System Project 1.0 /Admin/delete-fee.php Broken Access Control third-party-advisory
- https://github.com/rassec2/dbcve/issues/8 exploit, issue-tracking
- https://www.sourcecodester.com/ product