CVE-2026-11474 Kushan2k student-management-system Registration Endpoint RegisterService.php unrestricted upload

A security flaw has been discovered in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected is an unknown function of the file service/RegisterService.php of the component Registration Endpoint. Performing a manipulation of the argument stimg results in...

CVE-2026-11474

creationtimestamp| type| source ---|---|--- 2026-06-07 16:16:23+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-11474 2026-06-08 01:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnqjubp7pt2l 2026-06-08 01:30:41+00:00| seen|...