Oxygen

**Name of the Vulnerable Software and Affected Versions** a4m4 Student-Management-System versions up to f0c5f6842c5e8c431ff02b5260a565ca844df3a0 **Description** Improper authorization occurs due to the manipulation of the `sid` argument within an unknown function of the 'admin/deleteform.php' file. This issue allows a remote attacker to bypass authorization controls. **Recommendations** As a temporary mitigation, restrict access to the 'admin/deleteform.php' file. At the moment, there is no information about a newer version that contains a fix for this vulnerability.