CVE-2026-82553
Published Aug 30, 2026
Last updated 8 hours ago
AI description
CVE-2026-82553 identifies an improper authorization vulnerability within the `sambitraj Student Management System`, specifically affecting versions up to commit `56ba287f2e9031523ccb4244cb6e3fe530e4e5d5`. The flaw resides in the `mysqli_query` function of the `student_dashboard.php` file, where manipulation of the `roll_no` argument can lead to unauthorized access. This vulnerability allows for remote exploitation, and a public exploit is currently available. The project developers were reportedly informed of the issue via an issue report but have not yet provided a response.
- Description
- A vulnerability was detected in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is the function mysqli_query of the file student_dashboard.php of the component Student Dashboard. The manipulation of the argument roll_no results in improper authorization. The attack may be performed from remote. The exploit is now public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
- Source
- cna@vuldb.com
- NVD status
- Deferred
CVSS 4.0
- Type
- Secondary
- Base score
- 2.1
- Impact score
- -
- Exploitability score
- -
- Vector string
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity
- LOW
CVSS 3.1
- Type
- Primary
- Base score
- 6.3
- Impact score
- 3.4
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- Severity
- MEDIUM
CVSS 2.0
- Type
- Secondary
- Base score
- 6.5
- Impact score
- 6.4
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:P/I:P/A:P
- cna@vuldb.com
- CWE-266
Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.
- Hype score
4
🚨*CVE* CVE-2026-82553 A vulnerability was detected in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is the function mysqli_quer… https://t.co/iWvQLtaglR ----- Traducción: CVE-2026-82553 Se … https://t.co/bYtskK
@infoflowcloud
30 Aug 2026
109 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2026-82553 A vulnerability was detected in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is the function mysqli_quer… https://t.co/MB6GQxaFRI
@CVEnew
30 Aug 2026
1767 Impressions
0 Retweets
4 Likes
0 Bookmarks
0 Replies
0 Quotes