Executive brief
The Student Management System is a web-based application used to manage student records, grades, and personal information. A flaw in the student dashboard allows any authenticated student to view other students' profiles, including email addresses, passwords, grades, and remarks by simply changing a form parameter. This exposes sensitive student data and enables account takeover through compromised credentials.
Technical details
The vulnerability is an Insecure Direct Object Reference (IDOR) authorization bypass in the student_dashboard.php component. The vulnerable code accepts a user-supplied roll_no parameter in a POST request and queries the database without verifying that the authenticated student owns the requested record. The mysqli_query function executes an unauthenticated SQL query based on the roll_no parameter, returning sensitive fields (email, password, remarks, grades) to any logged-in student regardless of record ownership. No row-level access control or session-based ownership validation is performed. An attacker with valid student credentials can exploit this over the network by modifying the roll_no parameter to enumerate and retrieve other students' data. The product uses a rolling release model and has not yet responded to the disclosure.
Affected products
- sambitraj Student Management System up to commit 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5
Timeline
- 2026-08-30: disclosed: CVE-2026-82553 published
- 2026-07-15: other: Issue reported on GitHub