CVE-2026-97646

Name of the Vulnerable Software and Affected Versions ningzichun student-management-system versions prior to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf

Description An authorization bypass exists in the file admin/fun/getStudent.php. A remote attacker can exploit this by manipulating the sid argument, allowing them to bypass security checks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the file admin/fun/getStudent.php to minimize the risk of exploitation.