CVE-2026-97649

A cross-site scripting (XSS) vulnerability in ningzichun student-management-system up to commit 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. The echo function in admin/fun/addLog.php does not neutralize the reason/detail arguments, allowing script injection. The attack can be initiated remotely and the exploit has been publicly disclosed.

A cross-site request forgery (CSRF) vulnerability in ningzichun student-management-system up to commit 98760f5711cf6dc8b4adca53a9e207ca49b02ebf affects an unknown function. The attack can be initiated remotely and the exploit is now public.

An authorization bypass vulnerability in ningzichun student-management-system up to commit 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Manipulation of the sid/addtime/type/reason/detail/logdate arguments in user/editLog.php leads to authorization bypass. The attack can be performed remotely and the exploit has been publicly disclosed.

A weakness has been identified in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This affects an unknown function of the file admin/fun/getStudent.php. This manipulation of the argument sid causes authorization bypass. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability in ningzichun Student Management System (up to a specific commit) affects the session_start function in login.php. The manipulation results in session fixation. The attack can be launched remotely, and the exploit is public. The product does not use versioning, so affected and unaffected release details are unavailable.

In ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf, a vulnerability was found in the mysqli_connect function of config/database.php in the Database Connection component. This manipulation causes hard-coded credentials. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The product uses a rolling release model, so specific version information is not available. The project was informed but has not responded.

A vulnerability in ningzichun Student Management System (up to a specific commit) affects an unknown function in the file example.7z of the Backup Handler component. The manipulation leads to information disclosure. The attack can be initiated remotely, and the exploit is public. The product uses continuous delivery with rolling releases, so no version details are available.

In sambitraj Student Management System up to version 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5, a flaw was found in the Password Handler component in file aca.sql. Manipulating the Password argument leads to cleartext storage of sensitive information. The attack can be executed remotely.

A use of default password vulnerability was found in sambitraj Student-Management-System up to commit 56ba287f. Remote exploitation is possible and the exploit is public. The project has not responded.

In sambitraj Student-Management-System up to version 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5, a vulnerability was detected in the session_start function that leads to cookies without the 'httponly' flag. The attack may be launched remotely but is difficult to exploit.