Search
Find a vulnerability
Search criteria
14 vulnerabilities found for STUDENT-MANAGEMENT-SYSTEM by sambitraj
CVE-2026-82698 (GCVE-0-2026-82698)
Vulnerability from nvd – Published: 2026-08-31 13:30 – Updated: 2026-08-31 22:03
VLAI
EPSS
VEX
Title
sambitraj Student-Management-System aca.sql default password
Summary
A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown function of the file aca.sql. Performing a manipulation results in use of default password. Remote exploitation of the attack is possible. The exploit is now public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-31 21:51 UTC
CWE
- CWE-1393 - Use of Default Password
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/397186 | vdb-entry |
| https://vuldb.com/vuln/397186/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-82698 | third-party-advisory |
| https://vuldb.com/submit/894305 | third-party-advisory |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-S… | exploitissue-tracking |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| sambitraj | Student-Management-System |
Affected:
56ba287f2e9031523ccb4244cb6e3fe530e4e5d5
cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82698",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-31T21:51:44.616072Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-31T22:03:06.504Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:*"
],
"product": "Student-Management-System",
"vendor": "sambitraj",
"versions": [
{
"status": "affected",
"version": "56ba287f2e9031523ccb4244cb6e3fe530e4e5d5"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "luff (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown function of the file aca.sql. Performing a manipulation results in use of default password. Remote exploitation of the attack is possible. The exploit is now public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1393",
"description": "Use of Default Password",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-31T13:30:09.725Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-397186 | sambitraj Student-Management-System aca.sql default password",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/397186"
},
{
"name": "VDB-397186 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/397186/cti"
},
{
"name": "CVE-2026-82698 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-82698"
},
{
"name": "Submit #894305 | sambitraj STUDENT-MANAGEMENT-SYSTEM 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 Use of Default Password",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/894305"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/7"
},
{
"tags": [
"product"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-30T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-30T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-30T20:01:30.000Z",
"value": "VulDB entry last update"
}
],
"title": "sambitraj Student-Management-System aca.sql default password",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-82698",
"datePublished": "2026-08-31T13:30:09.725Z",
"dateReserved": "2026-08-30T17:56:14.849Z",
"dateUpdated": "2026-08-31T22:03:06.504Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82697 (GCVE-0-2026-82697)
Vulnerability from nvd – Published: 2026-08-31 13:15 – Updated: 2026-08-31 14:21
VLAI
EPSS
VEX
Title
sambitraj Student-Management-System session_start cookie httponly flag
Summary
A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The impacted element is the function session_start. Such manipulation leads to cookie without 'httponly' flag. The attack may be launched remotely. A high complexity level is associated with this attack. The exploitability is regarded as difficult. The exploit has been disclosed publicly and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-31 14:21 UTC
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/397185 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/397185/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-82697 | third-party-advisory |
| https://vuldb.com/submit/894300 | third-party-advisory |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-S… | exploitissue-tracking |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| sambitraj | Student-Management-System |
Affected:
56ba287f2e9031523ccb4244cb6e3fe530e4e5d5
cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82697",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-31T14:21:18.401580Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-31T14:21:25.752Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:*"
],
"product": "Student-Management-System",
"vendor": "sambitraj",
"versions": [
{
"status": "affected",
"version": "56ba287f2e9031523ccb4244cb6e3fe530e4e5d5"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "gscsd (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The impacted element is the function session_start. Such manipulation leads to cookie without \u0027httponly\u0027 flag. The attack may be launched remotely. A high complexity level is associated with this attack. The exploitability is regarded as difficult. The exploit has been disclosed publicly and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 2.6,
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1004",
"description": "Cookie Without \u0027HttpOnly\u0027 Flag",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-732",
"description": "Incorrect Permission Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-31T13:15:09.021Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-397185 | sambitraj Student-Management-System session_start cookie httponly flag",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/397185"
},
{
"name": "VDB-397185 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/397185/cti"
},
{
"name": "CVE-2026-82697 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-82697"
},
{
"name": "Submit #894300 | sambitraj STUDENT-MANAGEMENT-SYSTEM 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 Cookie Without \u0027HttpOnly\u0027 Flag",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/894300"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/10"
},
{
"tags": [
"product"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-30T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-30T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-30T20:01:26.000Z",
"value": "VulDB entry last update"
}
],
"title": "sambitraj Student-Management-System session_start cookie httponly flag",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-82697",
"datePublished": "2026-08-31T13:15:09.021Z",
"dateReserved": "2026-08-30T17:56:10.413Z",
"dateUpdated": "2026-08-31T14:21:25.752Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-78057 (GCVE-0-2026-78057)
Vulnerability from nvd – Published: 2026-08-23 02:45 – Updated: 2026-08-24 15:06
VLAI
EPSS
VEX
Title
sambitraj Student-Management-System Management Mutation sql injection
Summary
A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument roll_no/name/father_name/class/mobile/email/password/remark causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-24 15:06 UTC
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/394298 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/394298/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-78057 | third-party-advisory |
| https://vuldb.com/submit/881427 | third-party-advisory |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-S… | exploitissue-tracking |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| sambitraj | Student-Management-System |
Affected:
56ba287f2e9031523ccb4244cb6e3fe530e4e5d5
cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-78057",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-24T15:06:47.379056Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-24T15:06:55.317Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://vuldb.com/submit/881427"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Management Mutation Handler"
],
"product": "Student-Management-System",
"vendor": "sambitraj",
"versions": [
{
"status": "affected",
"version": "56ba287f2e9031523ccb4244cb6e3fe530e4e5d5"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "vkk6 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument roll_no/name/father_name/class/mobile/email/password/remark causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-23T02:45:10.588Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-394298 | sambitraj Student-Management-System Management Mutation sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/394298"
},
{
"name": "VDB-394298 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/394298/cti"
},
{
"name": "CVE-2026-78057 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-78057"
},
{
"name": "Submit #881427 | sambitraj STUDENT-MANAGEMENT-SYSTEM 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/881427"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/5"
},
{
"tags": [
"product"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-22T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-22T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-22T11:09:06.000Z",
"value": "VulDB entry last update"
}
],
"title": "sambitraj Student-Management-System Management Mutation sql injection",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-78057",
"datePublished": "2026-08-23T02:45:10.588Z",
"dateReserved": "2026-08-22T09:03:13.925Z",
"dateUpdated": "2026-08-24T15:06:55.317Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-78056 (GCVE-0-2026-78056)
Vulnerability from nvd – Published: 2026-08-23 02:30 – Updated: 2026-08-27 14:38
VLAI
EPSS
VEX
Title
sambitraj Student-Management-System Dashboard sql injection
Summary
A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is some unknown functionality of the component Dashboard. The manipulation of the argument roll_no/teacher_name results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-27 13:27 UTC
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/394297 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/394297/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-78056 | third-party-advisory |
| https://vuldb.com/submit/881418 | third-party-advisory |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-S… | exploitissue-tracking |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| sambitraj | Student-Management-System |
Affected:
56ba287f2e9031523ccb4244cb6e3fe530e4e5d5
cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-78056",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-27T13:27:59.897285Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T14:38:18.777Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Dashboard"
],
"product": "Student-Management-System",
"vendor": "sambitraj",
"versions": [
{
"status": "affected",
"version": "56ba287f2e9031523ccb4244cb6e3fe530e4e5d5"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "vkk6 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is some unknown functionality of the component Dashboard. The manipulation of the argument roll_no/teacher_name results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-23T02:30:09.648Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-394297 | sambitraj Student-Management-System Dashboard sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/394297"
},
{
"name": "VDB-394297 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/394297/cti"
},
{
"name": "CVE-2026-78056 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-78056"
},
{
"name": "Submit #881418 | sambitraj STUDENT-MANAGEMENT-SYSTEM 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/881418"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/4"
},
{
"tags": [
"product"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-22T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-22T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-22T11:09:00.000Z",
"value": "VulDB entry last update"
}
],
"title": "sambitraj Student-Management-System Dashboard sql injection",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-78056",
"datePublished": "2026-08-23T02:30:09.648Z",
"dateReserved": "2026-08-22T09:03:09.394Z",
"dateUpdated": "2026-08-27T14:38:18.777Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-10112 (GCVE-0-2026-10112)
Vulnerability from nvd – Published: 2026-05-30 08:00 – Updated: 2026-06-01 15:25
VLAI
EPSS
VEX
Title
sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard cross site scripting
Summary
A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. Affected is an unknown function of the component Dashboard Page. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-01 15:15 UTC
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/367290 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/367290/cti | signaturepermissions-required |
| https://vuldb.com/submit/818540 | third-party-advisory |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-S… | exploitissue-tracking |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| sambitraj | STUDENT-MANAGEMENT-SYSTEM |
Affected:
1.0
cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-10112",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-01T15:15:10.406787Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-01T15:25:40.794Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Dashboard Page"
],
"product": "STUDENT-MANAGEMENT-SYSTEM",
"vendor": "sambitraj",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Yuki-U (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. Affected is an unknown function of the component Dashboard Page. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 2.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 2.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 3.3,
"vectorString": "AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Cross Site Scripting",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Code Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-30T08:00:11.886Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-367290 | sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard cross site scripting",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/367290"
},
{
"name": "VDB-367290 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/367290/cti"
},
{
"name": "Submit #818540 | sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0 Stored Cross-Site Scripting",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/818540"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/3"
},
{
"tags": [
"product"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-29T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-05-29T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-05-29T19:11:57.000Z",
"value": "VulDB entry last update"
}
],
"title": "sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard cross site scripting"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-10112",
"datePublished": "2026-05-30T08:00:11.886Z",
"dateReserved": "2026-05-29T17:06:50.277Z",
"dateUpdated": "2026-06-01T15:25:40.794Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-10111 (GCVE-0-2026-10111)
Vulnerability from nvd – Published: 2026-05-30 07:45 – Updated: 2026-06-01 15:14
VLAI
EPSS
VEX
Title
sambitraj STUDENT-MANAGEMENT-SYSTEM Login Page sql injection
Summary
A flaw has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. This impacts an unknown function of the component Login Page. Executing a manipulation of the argument email can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-01 15:14 UTC
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/367289 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/367289/cti | signaturepermissions-required |
| https://vuldb.com/submit/818539 | third-party-advisory |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-S… | exploitissue-tracking |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| sambitraj | STUDENT-MANAGEMENT-SYSTEM |
Affected:
1.0
cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-10111",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-01T15:14:23.800191Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-01T15:14:30.615Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Login Page"
],
"product": "STUDENT-MANAGEMENT-SYSTEM",
"vendor": "sambitraj",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "fortuneh2c (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. This impacts an unknown function of the component Login Page. Executing a manipulation of the argument email can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-30T07:45:07.947Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-367289 | sambitraj STUDENT-MANAGEMENT-SYSTEM Login Page sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/367289"
},
{
"name": "VDB-367289 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/367289/cti"
},
{
"name": "Submit #818539 | sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0 Time-Based Blind SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/818539"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/2"
},
{
"tags": [
"product"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-29T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-05-29T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-05-29T19:11:55.000Z",
"value": "VulDB entry last update"
}
],
"title": "sambitraj STUDENT-MANAGEMENT-SYSTEM Login Page sql injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-10111",
"datePublished": "2026-05-30T07:45:07.947Z",
"dateReserved": "2026-05-29T17:06:47.758Z",
"dateUpdated": "2026-06-01T15:14:30.615Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-9562 (GCVE-0-2026-9562)
Vulnerability from nvd – Published: 2026-05-26 15:45 – Updated: 2026-05-28 14:33
VLAI
EPSS
VEX
Title
sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard access control
Summary
A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The affected element is an unknown function of the component Dashboard. Such manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-05-28 14:33 UTC
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/365625 | vdb-entry |
| https://vuldb.com/vuln/365625/cti | signaturepermissions-required |
| https://vuldb.com/submit/815536 | third-party-advisory |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-S… | issue-tracking |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-S… | exploitissue-tracking |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| sambitraj | STUDENT-MANAGEMENT-SYSTEM |
Affected:
56ba287f2e9031523ccb4244cb6e3fe530e4e5d5
cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-9562",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-28T14:33:24.118117Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-05-28T14:33:57.183Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/1"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Dashboard"
],
"product": "STUDENT-MANAGEMENT-SYSTEM",
"vendor": "sambitraj",
"versions": [
{
"status": "affected",
"version": "56ba287f2e9031523ccb4244cb6e3fe530e4e5d5"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Harry_You (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The affected element is an unknown function of the component Dashboard. Such manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "Improper Access Controls",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-26T15:45:09.914Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-365625 | sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard access control",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/365625"
},
{
"name": "VDB-365625 | CTI Indicators (IOB, IOC, TTP)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/365625/cti"
},
{
"name": "Submit #815536 | sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0 Unauthenticated Access",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/815536"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/1"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/1#issue-4348905508"
},
{
"tags": [
"product"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-26T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-05-26T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-05-26T12:39:14.000Z",
"value": "VulDB entry last update"
}
],
"title": "sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard access control"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-9562",
"datePublished": "2026-05-26T15:45:09.914Z",
"dateReserved": "2026-05-26T10:34:09.802Z",
"dateUpdated": "2026-05-28T14:33:57.183Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82698 (GCVE-0-2026-82698)
Vulnerability from cvelistv5 – Published: 2026-08-31 13:30 – Updated: 2026-08-31 22:03
VLAI
EPSS
VEX
Title
sambitraj Student-Management-System aca.sql default password
Summary
A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown function of the file aca.sql. Performing a manipulation results in use of default password. Remote exploitation of the attack is possible. The exploit is now public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-31 21:51 UTC
CWE
- CWE-1393 - Use of Default Password
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/397186 | vdb-entry |
| https://vuldb.com/vuln/397186/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-82698 | third-party-advisory |
| https://vuldb.com/submit/894305 | third-party-advisory |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-S… | exploitissue-tracking |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| sambitraj | Student-Management-System |
Affected:
56ba287f2e9031523ccb4244cb6e3fe530e4e5d5
cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82698",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-31T21:51:44.616072Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-31T22:03:06.504Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:*"
],
"product": "Student-Management-System",
"vendor": "sambitraj",
"versions": [
{
"status": "affected",
"version": "56ba287f2e9031523ccb4244cb6e3fe530e4e5d5"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "luff (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown function of the file aca.sql. Performing a manipulation results in use of default password. Remote exploitation of the attack is possible. The exploit is now public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1393",
"description": "Use of Default Password",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-31T13:30:09.725Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-397186 | sambitraj Student-Management-System aca.sql default password",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/397186"
},
{
"name": "VDB-397186 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/397186/cti"
},
{
"name": "CVE-2026-82698 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-82698"
},
{
"name": "Submit #894305 | sambitraj STUDENT-MANAGEMENT-SYSTEM 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 Use of Default Password",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/894305"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/7"
},
{
"tags": [
"product"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-30T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-30T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-30T20:01:30.000Z",
"value": "VulDB entry last update"
}
],
"title": "sambitraj Student-Management-System aca.sql default password",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-82698",
"datePublished": "2026-08-31T13:30:09.725Z",
"dateReserved": "2026-08-30T17:56:14.849Z",
"dateUpdated": "2026-08-31T22:03:06.504Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82697 (GCVE-0-2026-82697)
Vulnerability from cvelistv5 – Published: 2026-08-31 13:15 – Updated: 2026-08-31 14:21
VLAI
EPSS
VEX
Title
sambitraj Student-Management-System session_start cookie httponly flag
Summary
A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The impacted element is the function session_start. Such manipulation leads to cookie without 'httponly' flag. The attack may be launched remotely. A high complexity level is associated with this attack. The exploitability is regarded as difficult. The exploit has been disclosed publicly and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-31 14:21 UTC
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/397185 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/397185/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-82697 | third-party-advisory |
| https://vuldb.com/submit/894300 | third-party-advisory |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-S… | exploitissue-tracking |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| sambitraj | Student-Management-System |
Affected:
56ba287f2e9031523ccb4244cb6e3fe530e4e5d5
cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82697",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-31T14:21:18.401580Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-31T14:21:25.752Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:*"
],
"product": "Student-Management-System",
"vendor": "sambitraj",
"versions": [
{
"status": "affected",
"version": "56ba287f2e9031523ccb4244cb6e3fe530e4e5d5"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "gscsd (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The impacted element is the function session_start. Such manipulation leads to cookie without \u0027httponly\u0027 flag. The attack may be launched remotely. A high complexity level is associated with this attack. The exploitability is regarded as difficult. The exploit has been disclosed publicly and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 2.6,
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1004",
"description": "Cookie Without \u0027HttpOnly\u0027 Flag",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-732",
"description": "Incorrect Permission Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-31T13:15:09.021Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-397185 | sambitraj Student-Management-System session_start cookie httponly flag",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/397185"
},
{
"name": "VDB-397185 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/397185/cti"
},
{
"name": "CVE-2026-82697 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-82697"
},
{
"name": "Submit #894300 | sambitraj STUDENT-MANAGEMENT-SYSTEM 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 Cookie Without \u0027HttpOnly\u0027 Flag",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/894300"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/10"
},
{
"tags": [
"product"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-30T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-30T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-30T20:01:26.000Z",
"value": "VulDB entry last update"
}
],
"title": "sambitraj Student-Management-System session_start cookie httponly flag",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-82697",
"datePublished": "2026-08-31T13:15:09.021Z",
"dateReserved": "2026-08-30T17:56:10.413Z",
"dateUpdated": "2026-08-31T14:21:25.752Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-78057 (GCVE-0-2026-78057)
Vulnerability from cvelistv5 – Published: 2026-08-23 02:45 – Updated: 2026-08-24 15:06
VLAI
EPSS
VEX
Title
sambitraj Student-Management-System Management Mutation sql injection
Summary
A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument roll_no/name/father_name/class/mobile/email/password/remark causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-24 15:06 UTC
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/394298 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/394298/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-78057 | third-party-advisory |
| https://vuldb.com/submit/881427 | third-party-advisory |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-S… | exploitissue-tracking |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| sambitraj | Student-Management-System |
Affected:
56ba287f2e9031523ccb4244cb6e3fe530e4e5d5
cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-78057",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-24T15:06:47.379056Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-24T15:06:55.317Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://vuldb.com/submit/881427"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Management Mutation Handler"
],
"product": "Student-Management-System",
"vendor": "sambitraj",
"versions": [
{
"status": "affected",
"version": "56ba287f2e9031523ccb4244cb6e3fe530e4e5d5"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "vkk6 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument roll_no/name/father_name/class/mobile/email/password/remark causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-23T02:45:10.588Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-394298 | sambitraj Student-Management-System Management Mutation sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/394298"
},
{
"name": "VDB-394298 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/394298/cti"
},
{
"name": "CVE-2026-78057 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-78057"
},
{
"name": "Submit #881427 | sambitraj STUDENT-MANAGEMENT-SYSTEM 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/881427"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/5"
},
{
"tags": [
"product"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-22T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-22T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-22T11:09:06.000Z",
"value": "VulDB entry last update"
}
],
"title": "sambitraj Student-Management-System Management Mutation sql injection",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-78057",
"datePublished": "2026-08-23T02:45:10.588Z",
"dateReserved": "2026-08-22T09:03:13.925Z",
"dateUpdated": "2026-08-24T15:06:55.317Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-78056 (GCVE-0-2026-78056)
Vulnerability from cvelistv5 – Published: 2026-08-23 02:30 – Updated: 2026-08-27 14:38
VLAI
EPSS
VEX
Title
sambitraj Student-Management-System Dashboard sql injection
Summary
A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is some unknown functionality of the component Dashboard. The manipulation of the argument roll_no/teacher_name results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-27 13:27 UTC
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/394297 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/394297/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-78056 | third-party-advisory |
| https://vuldb.com/submit/881418 | third-party-advisory |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-S… | exploitissue-tracking |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| sambitraj | Student-Management-System |
Affected:
56ba287f2e9031523ccb4244cb6e3fe530e4e5d5
cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-78056",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-27T13:27:59.897285Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T14:38:18.777Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Dashboard"
],
"product": "Student-Management-System",
"vendor": "sambitraj",
"versions": [
{
"status": "affected",
"version": "56ba287f2e9031523ccb4244cb6e3fe530e4e5d5"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "vkk6 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is some unknown functionality of the component Dashboard. The manipulation of the argument roll_no/teacher_name results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-23T02:30:09.648Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-394297 | sambitraj Student-Management-System Dashboard sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/394297"
},
{
"name": "VDB-394297 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/394297/cti"
},
{
"name": "CVE-2026-78056 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-78056"
},
{
"name": "Submit #881418 | sambitraj STUDENT-MANAGEMENT-SYSTEM 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/881418"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/4"
},
{
"tags": [
"product"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-22T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-22T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-22T11:09:00.000Z",
"value": "VulDB entry last update"
}
],
"title": "sambitraj Student-Management-System Dashboard sql injection",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-78056",
"datePublished": "2026-08-23T02:30:09.648Z",
"dateReserved": "2026-08-22T09:03:09.394Z",
"dateUpdated": "2026-08-27T14:38:18.777Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-10112 (GCVE-0-2026-10112)
Vulnerability from cvelistv5 – Published: 2026-05-30 08:00 – Updated: 2026-06-01 15:25
VLAI
EPSS
VEX
Title
sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard cross site scripting
Summary
A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. Affected is an unknown function of the component Dashboard Page. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-01 15:15 UTC
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/367290 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/367290/cti | signaturepermissions-required |
| https://vuldb.com/submit/818540 | third-party-advisory |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-S… | exploitissue-tracking |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| sambitraj | STUDENT-MANAGEMENT-SYSTEM |
Affected:
1.0
cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-10112",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-01T15:15:10.406787Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-01T15:25:40.794Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Dashboard Page"
],
"product": "STUDENT-MANAGEMENT-SYSTEM",
"vendor": "sambitraj",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Yuki-U (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. Affected is an unknown function of the component Dashboard Page. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 2.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 2.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 3.3,
"vectorString": "AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Cross Site Scripting",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Code Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-30T08:00:11.886Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-367290 | sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard cross site scripting",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/367290"
},
{
"name": "VDB-367290 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/367290/cti"
},
{
"name": "Submit #818540 | sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0 Stored Cross-Site Scripting",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/818540"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/3"
},
{
"tags": [
"product"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-29T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-05-29T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-05-29T19:11:57.000Z",
"value": "VulDB entry last update"
}
],
"title": "sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard cross site scripting"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-10112",
"datePublished": "2026-05-30T08:00:11.886Z",
"dateReserved": "2026-05-29T17:06:50.277Z",
"dateUpdated": "2026-06-01T15:25:40.794Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-10111 (GCVE-0-2026-10111)
Vulnerability from cvelistv5 – Published: 2026-05-30 07:45 – Updated: 2026-06-01 15:14
VLAI
EPSS
VEX
Title
sambitraj STUDENT-MANAGEMENT-SYSTEM Login Page sql injection
Summary
A flaw has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. This impacts an unknown function of the component Login Page. Executing a manipulation of the argument email can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-01 15:14 UTC
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/367289 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/367289/cti | signaturepermissions-required |
| https://vuldb.com/submit/818539 | third-party-advisory |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-S… | exploitissue-tracking |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| sambitraj | STUDENT-MANAGEMENT-SYSTEM |
Affected:
1.0
cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-10111",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-01T15:14:23.800191Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-01T15:14:30.615Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Login Page"
],
"product": "STUDENT-MANAGEMENT-SYSTEM",
"vendor": "sambitraj",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "fortuneh2c (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. This impacts an unknown function of the component Login Page. Executing a manipulation of the argument email can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-30T07:45:07.947Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-367289 | sambitraj STUDENT-MANAGEMENT-SYSTEM Login Page sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/367289"
},
{
"name": "VDB-367289 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/367289/cti"
},
{
"name": "Submit #818539 | sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0 Time-Based Blind SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/818539"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/2"
},
{
"tags": [
"product"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-29T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-05-29T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-05-29T19:11:55.000Z",
"value": "VulDB entry last update"
}
],
"title": "sambitraj STUDENT-MANAGEMENT-SYSTEM Login Page sql injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-10111",
"datePublished": "2026-05-30T07:45:07.947Z",
"dateReserved": "2026-05-29T17:06:47.758Z",
"dateUpdated": "2026-06-01T15:14:30.615Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-9562 (GCVE-0-2026-9562)
Vulnerability from cvelistv5 – Published: 2026-05-26 15:45 – Updated: 2026-05-28 14:33
VLAI
EPSS
VEX
Title
sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard access control
Summary
A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The affected element is an unknown function of the component Dashboard. Such manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-05-28 14:33 UTC
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/365625 | vdb-entry |
| https://vuldb.com/vuln/365625/cti | signaturepermissions-required |
| https://vuldb.com/submit/815536 | third-party-advisory |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-S… | issue-tracking |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-S… | exploitissue-tracking |
| https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| sambitraj | STUDENT-MANAGEMENT-SYSTEM |
Affected:
56ba287f2e9031523ccb4244cb6e3fe530e4e5d5
cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-9562",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-28T14:33:24.118117Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-05-28T14:33:57.183Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/1"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:sambitraj:student-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Dashboard"
],
"product": "STUDENT-MANAGEMENT-SYSTEM",
"vendor": "sambitraj",
"versions": [
{
"status": "affected",
"version": "56ba287f2e9031523ccb4244cb6e3fe530e4e5d5"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Harry_You (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The affected element is an unknown function of the component Dashboard. Such manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "Improper Access Controls",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-26T15:45:09.914Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-365625 | sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard access control",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/365625"
},
{
"name": "VDB-365625 | CTI Indicators (IOB, IOC, TTP)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/365625/cti"
},
{
"name": "Submit #815536 | sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0 Unauthenticated Access",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/815536"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/1"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/1#issue-4348905508"
},
{
"tags": [
"product"
],
"url": "https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-26T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-05-26T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-05-26T12:39:14.000Z",
"value": "VulDB entry last update"
}
],
"title": "sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard access control"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-9562",
"datePublished": "2026-05-26T15:45:09.914Z",
"dateReserved": "2026-05-26T10:34:09.802Z",
"dateUpdated": "2026-05-28T14:33:57.183Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}