CVE-2026-82553

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-82553
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82553.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-82553
Published
2026-08-30T17:00:08Z
Modified
2026-10-08T02:52:06Z
Severity
  • 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
sambitraj Student Management System Student Dashboard student_dashboard.php mysqli_query improper authorization
Details

A vulnerability was detected in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is the function mysqli_query of the file student_dashboard.php of the component Student Dashboard. The manipulation of the argument roll_no results in improper authorization. The attack may be performed from remote. The exploit is now public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-266",
        "CWE-285"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82553.json"
}
References

Affected packages

Git / github.com/sambitraj/student-management-system

Affected ranges

Type
GIT
Repo
https://github.com/sambitraj/student-management-system
Events
Introduced
56ba287f2e9031523ccb4244cb6e3fe530e4e5d5
Last Affected
56ba287f2e9031523ccb4244cb6e3fe530e4e5d5

Affected versions

Other
56ba287f2e9031523ccb4244cb6e3fe530e4e5d5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82553.json"