CVE-2026-82553: Improper Authorization in sambitraj Student Management System
Description
A vulnerability was detected in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is the function mysqli_query of the file student_dashboard.php of the component Student Dashboard. The manipulation of the argument roll_no results in improper authorization. The attack may be performed from remote. The exploit is now public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
CVSS v4.0
Score 5.3medium
Affected software
sambitraj
Student Management System
cpe:2.3:a:sambitraj:student_management_system:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in sambitraj Student Management System up to commit 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 affects the Student Dashboard component's mysqli_query function in student_dashboard.php. Improper authorization arises from manipulation of the roll_no parameter, enabling unauthorized access or actions remotely. The system's rolling release nature means no fixed version numbers are provided. The issue was reported early but remains unpatched, and exploit code is publicly available.
Potential Impact
Improper authorization can allow remote attackers with low privileges to perform unauthorized actions or access data by manipulating the roll_no parameter. This could lead to unauthorized data disclosure or modification within the Student Management System. The CVSS 4.0 score of 5.3 reflects a medium severity impact with network attack vector, low complexity, no user interaction, and limited scope and impact.
Mitigation Recommendations
No official fix or patch is currently available. Since the vendor has not responded and no remediation guidance is provided, users should consider implementing additional access control checks or input validation on the roll_no parameter as a temporary mitigation. Monitor vendor channels for updates and apply any future patches promptly.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-08-29T18:48:08.732Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a946369acd9273b49cc3b0d
Added to database: 08/30/2026, 17:07:53 UTC
Last enriched: 09/07/2026, 14:58:22 UTC
Last updated: 10/14/2026, 18:48:24 UTC
Views: 92
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.