CVE Intelligence

Edupluscampus Edupluscampus vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Edupluscampus Edupluscampus: 1 record(s), with affected versions and fixes.
cpe:2.3:a:edupluscampus:edupluscampus

CVE-2025-61148 Medium · 6.5 CWE-639 Dec 4, 2025
Authorization Bypass Through User-Controlled Key (IDOR) in Edupluscampus
An Insecure Direct Object Reference (IDOR) vulnerability in the EduplusCampus 3.0.1 Student Payment API allows authenticated users to access other students personal and financial records by modifying the 'rec_no' parameter in the /student/get-receipt endpoint.