Threats Tagged 'cve-2026-82553'

CVE-2026-82553 is an improper authorization vulnerability in the sambitraj Student Management System affecting the mysqli_query function in student_dashboard.php. The issue arises from manipulation of the roll_no argument, allowing unauthorized access. The vulnerability can be exploited remotely and public exploit code is available. The product uses a rolling release system, so specific affected or fixed versions are not disclosed. The vendor has been informed but has not yet responded or provided a fix. The CVSS score is 5.3, indicating medium severity.

A vulnerability was detected in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is the function mysqli_query of the file student_dashboard.php of the component Student Dashboard. The manipulation of the argument roll_no results in improper authorization. The attack may be performed from remote. The exploit is now public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.