Lucene search
+L

8 matches found

NVD
NVD
•added 2026/09/25 1:16 a.m.•24 views

CVE-2026-97646

A weakness has been identified in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This affects an unknown function of the file admin/fun/getStudent.php. This manipulation of the argument sid causes authorization bypass. The attack is possible to be carried out...

7.5CVSS0.00302EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/25 12:15 a.m.•17 views

CVE-2026-97646 ningzichun student-management-system getStudent.php authorization

A weakness has been identified in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This affects an unknown function of the file admin/fun/getStudent.php. This manipulation of the argument sid causes authorization bypass. The attack is possible to be carried out...

7.5CVSS6.6AI score0.00302EPSS
SaveExploits0References6
osv-cve
osv-cve
•added 2026/09/25 12:15 a.m.•5 views

CVE-2026-97646 ningzichun student-management-system getStudent.php authorization

A weakness has been identified in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This affects an unknown function of the file admin/fun/getStudent.php. This manipulation of the argument sid causes authorization bypass. The attack is possible to be carried out...

6.9CVSS5.3AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2026/09/25 12:15 a.m.•36 views

CVE-2026-97646 ningzichun student-management-system getStudent.php authorization

A weakness has been identified in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This affects an unknown function of the file admin/fun/getStudent.php. This manipulation of the argument sid causes authorization bypass. The attack is possible to be carried out...

7.5CVSS0.00302EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/25 12:15 a.m.•18 views

EUVD-2026-86488

A weakness has been identified in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This affects an unknown function of the file admin/fun/getStudent.php. This manipulation of the argument sid causes authorization bypass. The attack is possible to be carried out...

7.5CVSS6.6AI score0.00302EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/25 12:15 a.m.•28 views

CVE-2026-97646

A vulnerability exists in the ningzichun student-management-system (up to commit 98760f5711cf6dc8b4adca53a9e207ca49b02ebf ) within the admin/fun/getStudent.php file. The root cause is an authorization bypass triggered by the manipulation of the sid argument. This flaw can be exploited remotely . ...

7.5CVSS6.6AI score0.00302EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•12 views

CVE-2026-97646: Authorization Bypass Through User-Controlled Key

A weakness has been identified in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This affects an unknown function of the file admin/fun/getStudent.php. This manipulation of the argument sid causes authorization bypass. The attack is possible to be carried out...

7.5CVSS5.3AI score0.00302EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•7 views

PT-2026-98321

Name of the Vulnerable Software and Affected Versions ningzichun student-management-system versions prior to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf Description An authorization bypass exists in the file admin/fun/getStudent.php. A remote attacker can exploit this by manipulating the sid argumen...

7.5CVSS5.8AI score0.00302EPSS
SaveExploits0References11
Rows per page
Query Builder