Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%

student-management-system — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in student-management-system, with AI-generated Chinese analysis, references, and POCs.

This page documents known security weaknesses associated with the Student-Management-System vendor product within the context of common vulnerability classifications. It aggregates reported flaws that have been identified in the software ecosystem over a specific historical period to provide a comprehensive view of past security incidents. By consolidating these records, the resource offers a centralized repository for tracking the evolution of risks tied to this specific educational technology platform. Visitors to this page can track the vendor's public advisories and patch release cycles to stay informed about emerging threats. Furthermore, the collection allows users to understand the underlying mechanics of specific weakness classes that frequently impact student data management systems. Researchers and administrators can also look up the product's vulnerability history to assess long-term security trends and identify recurring patterns in code quality or architecture. This approach facilitates better risk management by highlighting persistent issues that may not be immediately visible in isolated incident reports. The data is organized to help stakeholders prioritize remediation efforts based on severity and prevalence. Understanding these historical contexts is crucial for maintaining the integrity of student information and ensuring compliance with data protection regulations. This aggregation serves as a foundational reference for security audits and continuous monitoring strategies. It enables organizations to benchmark their current security posture against known historical failures. The goal is to provide clarity and actionable insights without overwhelming the reader with unnecessary technical noise. This structured overview supports informed decision-making for system maintainers and security professionals alike.

Vendor: Cyber-III

CVE IDTitleCVSSSeverityPublished
CVE-2026-10619 sayan365 student-management-system improper authentication CWE-287 7.3 High2026-06-02
CVE-2026-10272 a4m4 Student-Management-System deleteform.php improper authorization CWE-285 6.5 Medium2026-06-01
CVE-2026-10271 a4m4 Student-Management-System Admin Endpoint admin redirect CWE-698 6.3 Medium2026-06-01
CVE-2026-10112 sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard cross site scripting CWE-79 2.4 Low2026-05-30
CVE-2026-10111 sambitraj STUDENT-MANAGEMENT-SYSTEM Login Page sql injection CWE-89 7.3 High2026-05-30
CVE-2026-9562 sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard access control CWE-284 7.3 High2026-05-26
CVE-2026-5671 Cyber-III Student-Management-System Class Schedule Deletion Endpoint delete_batch.php cross site scripting CWE-79 4.3 Medium2026-04-06
CVE-2026-5670 Cyber-III Student-Management-System upload.php move_uploaded_file unrestricted upload CWE-434 6.3 Medium2026-04-06
CVE-2026-5669 Cyber-III Student-Management-System Parameter login.php sql injection CWE-89 7.3 High2026-04-06
CVE-2026-5668 Cyber-III Student-Management-System add%20notice.php cross site scripting CWE-79 2.4 Low2026-04-06
CVE-2026-5644 Cyber-III Student-Management-System batch-notice.php cross site scripting CWE-79 2.4 Low2026-04-06
CVE-2026-5643 Cyber-III Student-Management-System Admin Add Endpoint notice.php cross site scripting CWE-79 2.4 Low2026-04-06
CVE-2026-5642 Cyber-III Student-Management-System HTTP POST Request update.php improper authorization CWE-285 7.3 High2026-04-06

All 13 known CVE vulnerabilities affecting student-management-system with full Chinese analysis, references, and POCs where available.