School Student Management System vulnerabilities

In the School Student Management System (OUSL-GROUP-BrinaryBrains) up to version 1e70e5ad1125b86dca4ee086eb6bb121f17708b6, a vulnerability was found in the ajax_forgot_password function in file application/controllers/Login.php (Forgot Password Endpoint). Manipulation of the email argument leads to weak password recovery. The attack can be launched remotely, is difficult, but the exploit is now public.

OUSL-GROUP-BrinaryBrains School Student Management System up to commit 1e70e5ad1125b86dca4ee086eb6bb121f17708b6 has a vulnerability in the marks function of file application/controllers/Parents.php. Manipulation of the param1 argument leads to improper control of resource identifiers. The attack can be performed remotely. The exploit has been published. The project has not responded.

OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6 has a weakness in the sign_auth_cookie function of the file application/controllers/Login.php in the MY_Controller component. Manipulation of the role argument can lead to improper authentication, allowing remote attack. Exploit is publicly available.