CVE-2026-5531
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
Cleartext storage vulnerability in SourceCodester Student Result Management System 1.0. An unknown function in the file /login_credentials.txt of the HTTP GET Request Handler component stores credentials in cleartext. The attack can be performed remotely, exploit is public.
Risk Assessment
An attacker can remotely read the /login_credentials.txt file and obtain user login credentials, potentially leading to unauthorized access to the system.
Recommendation
Immediately delete the /login_credentials.txt file and change all passwords. Also configure the system to not store passwords in cleartext.
Original NVD description (English source)
A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /login_credentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.