CVE-2024-35353 | Diño Physics School Assistant 2.3 Users.php id improper authorization

A vulnerability has been found in Diño Physics School Assistant 2.3 and classified as critical. This vulnerability affects unknown code of the file /classes/Users.php?f=save. The manipulation of the argument id leads to improper authorization.

This vulnerability was named CVE-2024-35353. The attack can be initiated remotely. There is no exploit available.