PT-2026-47337 · Imvks786 · Student Management System

·

CVE-2026-11533

·

Published

2026-06-08

·

Updated

2026-06-08

CVSS v2.0

5.5

Medium

VectorAV:N/AC:L/Au:S/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions imvks786 student management system versions prior to 9599b560ad3c3b83e75d328b76bedcd489ef1f46
Description An improper authorization issue exists in the Student Deletion Endpoint component within the /see.php file. A remote attacker can exploit this by manipulating the del argument to gain unauthorized access.
Recommendations Restrict access to the /see.php file or avoid using the del argument in the Student Deletion Endpoint until a fix is provided. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authorization

Incorrect Privilege Assignment

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-11533

Affected Products

Student Management System