EUVD-2026-68518
GHSA-p85m-6g59-738g
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible default credential bypass needs no prior privileges; only limited confidentiality impact (student data) with no integrity or availability consequence confirmed.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown function of the file aca.sql. Performing a manipulation results in use of default password. Remote exploitation of the attack is possible. The exploit is now public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.
AnalysisAI
Default credentials hardcoded in the aca.sql database initialization file of sambitraj's Student-Management-System expose unauthenticated remote attackers to authentication bypass using publicly known passwords across all commits through 56ba287f. The project's GitHub issue tracker hosts a public proof-of-concept, and the maintainer has not responded to the disclosure, leaving no remediated release available. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires two concurrent conditions: (1) the application is reachable over a network (the CVSS 4.0 AV:N vector confirms this is the intended attack surface - localhost-only deployments are not exposed), and (2) default credentials from aca.sql have not been changed after the SQL file was imported to set up the database. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 6.9 (AV:N/AC:L/AT:N/PR:N/UI:N/VC:L) accurately reflects a network-accessible, zero-complexity attack with limited data-exposure impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch is available at time of analysis; the maintainer has not responded to the coordinated disclosure reported via GitHub issue https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/7. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Student Management System
View allA vulnerability, which was classified as critical, was found in SourceCodester Student Management System. Rated critical
Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (
phpgurukul Student Management System 1.0 is vulnerable to SQL Injection in studentms/admin/search.php via the searchdata
A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. Rated medium severi
A vulnerability classified as critical has been found in SourceCodester Student Management System 1.0. Rated medium seve
A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. Rated critical severi
A vulnerability was found in ningzichun Student Management System 1.0. Rated critical severity (CVSS 9.8), this vulnerab
Authentication bypass in ealpha072's Student-Management-System PHP application exposes the administrative backend to rem
Authentication bypass in sayan365's Student Management System exposes multiple protected endpoints to remote unauthentic
SQL injection in itsourcecode Student Management System 1.0 allows remote attackers to execute arbitrary SQL commands vi
SQL injection in itsourcecode Student Management System 1.0 allows remote attackers to manipulate database queries via t
SQL injection in itsourcecode Student Management System version 1.0 allows remote, unauthenticated attackers to execute
Same weakness CWE-1393 – Use of Default Password
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today