Executive brief
Student Crud Operation is an open-source PHP application for managing student records. The application exposes a sensitive SQL backup file (card_activation.sql) in a web-accessible directory, allowing attackers to download database credentials and other sensitive information without authentication. This information disclosure could enable database compromise and unauthorized access to student records.
Technical details
The vulnerability is an insecure direct object reference (IDOR) / path traversal issue in the Backup File Handler component, where a SQL database backup file is stored in a web-accessible location (/card_activation.sql) with insufficient access controls. An unauthenticated remote attacker can directly access and download the file via HTTP, exposing database schema, queries, and potentially embedded credentials. The attack requires no authentication, user interaction, or special preconditions beyond network reachability. Successful exploitation allows information disclosure of sensitive database content (CWE-200, CWE-552). No patch information is currently available for version 1.0.
Affected products
- code-projects Student Crud Operation 1.0
Timeline
- 2026-09-08: disclosed: CVE-2026-86519 published