CVE-2025-14206

HighCVSS 7.5/10Last modified Oct 14, 2026

Description

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-266 CWE-285

Affected software

Vendor	Product	Versions
SourceCodester	Online Student Clearance System	1.0

References

https://github.com/rassec2/dbcve/issues/8Exploit, Issue Tracking, Mitigation, Third Party Advisory
https://vuldb.com/?ctiid.334649Permissions Required, VDB Entry
https://vuldb.com/?id.334649Third Party Advisory, VDB Entry
https://vuldb.com/?submit.700465Third Party Advisory, VDB Entry
https://www.sourcecodester.com/Product

Timeline

Published: Dec 8, 2025
Last modified: Oct 14, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-142077.3A vulnerability was identified in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. The impacted element i CVE-2025-142086.3A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_sett CVE-2025-142099.8A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /update_query.ph CVE-2025-14212.4Data provided in a request performed to the server while activating a new device are put in a database. Other high privileged users might do CVE-2025-142109.8A security vulnerability has been detected in projectworlds Advanced Library Management System 1.0. Affected is an unknown function of the f CVE-2025-142119.8A vulnerability was detected in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functiona CVE-2025-142129.8A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the f CVE-2025-142138.3Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to th CVE-2025-142148.8A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /section_edit1.php. CVE-2025-142159.8A vulnerability was found in code-projects Currency Exchange System 1.0. This vulnerability affects unknown code of the file /edit.php. The CVE-2025-142169.8A vulnerability was determined in code-projects Currency Exchange System 1.0. This issue affects some unknown processing of the file /viewse CVE-2025-142179.8A vulnerability was identified in code-projects Currency Exchange System 1.0. Impacted is an unknown function of the file /edittrns.php. Suc