CVE-2025-13468 MEDIUM

CVE-2025-13468: SourceCodester Alumni Management System Delete admin_class.php delete_event authorization

Vendor Sourcecodester
Product Alumni Management System
Weakness CWE-862 · Missing authorization
Published November 20, 2025
Last update November 20, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function delete_forum/delete_career/delete_comment/delete_gallery/delete_event of the file admin/admin_class.php of the component Delete Handler. Executing manipulation of the argument ID can lead to missing authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.

Key dates

02Disclosure timeline

November 20, 2025 CVE published
November 20, 2025 Record updated