Description
Code-projects Simple School Managment System 是一个基于 PHP 的学校管理系统，用于管理学校的日常事务。该系统的 '/teacher_login.php' 页面中的 'pass' 参数和 'name' 参数存在身份验证绕过漏洞，攻击者可以利用该漏洞绕过身份验证，并访问未经授权的功能。
Simple School Managment System /teacher_login.php 权限绕过漏洞 （CVE-2024-25313）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-25313
https://github.com/tubakvgc/CVEs/blob/main/Simple%20School%20Management%20System/Simple%20School%20Managment%20System%20-%20Authentication%20Bypass%20-%202.md
https://access.redhat.com/security/cve/cve-2024-25313
https://devhub.checkmarx.com/cve-details/cve-2024-25313/
https://cve.imfht.com/detail/CVE-2024-25313?lang=en
https://www.tenable.com/cve/CVE-2024-25313/cpes