Iron Basin

A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php. Performing a manipulation of the argument Name results in improper authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

**Name of the Vulnerable Software and Affected Versions** sambitraj Student Management System versions prior to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 **Description** A flaw in the Password Handler component, specifically within the `aca.sql` file, allows remote attackers to manipulate the `Password` argument. This can result in the cleartext storage of sensitive information. **Recommendations** Update sambitraj Student Management System to a version later than 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5.