Sourcecodester Student Result Management System vulnerabilities

CVE-2026-5531 [MEDIUM] CWE-312 CVE-2026-5531: A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is a A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /login_credentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotely. The exploit has been disclosed to the public and may

CVE-2026-2984 [MEDIUM] CWE-404 CVE-2026-2984: A vulnerability was identified in SourceCodester Student Result Management System 1.0. This affects A vulnerability was identified in SourceCodester Student Result Management System 1.0. This affects an unknown function of the file /admin/core/drop_user.php. Such manipulation of the argument ID leads to denial of service. The attack can be executed remotely. The exploit is publicly available and might be used.

CVE-2026-2983 [MEDIUM] CWE-266 CVE-2026-2983: A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/import_users.php of the component Bulk Import. This manipulation of the argument File causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly dis

CVE-2026-2938 [MEDIUM] CWE-266 CVE-2026-2938: A vulnerability has been found in SourceCodester Student Result Management System 1.0. The affected A vulnerability has been found in SourceCodester Student Result Management System 1.0. The affected element is an unknown function of the file /srms/script/admin/core/update_smtp.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-6477 [MEDIUM] CWE-79 CVE-2025-6477: A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declar A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /script/admin/system of the component System Settings Page. The manipulation of the argument School Name leads to cross site scripting. The attack can be launched r

CVE-2025-6475 [MEDIUM] CWE-79 CVE-2025-6475: A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as p A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/admin/manage_students of the component Manage Students Module. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed

CVE-2025-5727 [MEDIUM] CWE-79 CVE-2025-5727: A vulnerability classified as problematic has been found in SourceCodester Student Result Management A vulnerability classified as problematic has been found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /script/academic/announcement of the component Announcement Page. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has

CVE-2025-5723 [MEDIUM] CWE-79 CVE-2025-5723: A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as p A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/academic/classes of the component Classes Page. The manipulation of the argument Class Name leads to cross site scripting. The attack may be initiated remotely. The exploit has be

CVE-2025-5725 [MEDIUM] CWE-79 CVE-2025-5725: A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declar A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /script/academic/grading-system of the component Grading System Page. The manipulation of the argument Remark leads to cross site scripting. The attack can be launc

CVE-2025-5721 [MEDIUM] CWE-79 CVE-2025-5721: A vulnerability, which was classified as problematic, was found in SourceCodester Student Result Man A vulnerability, which was classified as problematic, was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /script/academic/core/update_profile of the component Profile Setting Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been

CVE-2025-5724 [MEDIUM] CWE-79 CVE-2025-5724: A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been classi A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /script/academic/subjects of the component Subjects Page. The manipulation of the argument Subject leads to cross site scripting. It is possible to launch the attack remotely. The exploit h

CVE-2025-5726 [MEDIUM] CWE-79 CVE-2025-5726: A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been rated A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /script/academic/division-system of the component Division System Page. The manipulation of the argument Division leads to cross site scripting. The attack may be launched re

CVE-2025-5722 [MEDIUM] CWE-79 CVE-2025-5722: A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /script/academic/terms of the component Add Academic Term. The manipulation of the argument Academic Term leads to cross site scripting. The attack can be initiated remotely. The exploi

CVE-2025-5649 [MEDIUM] CWE-266 CVE-2025-5649: A vulnerability classified as critical has been found in SourceCodester Student Result Management Sy A vulnerability classified as critical has been found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /admin/core/new_user of the component Register Interface. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public

CVE-2025-4912 [MEDIUM] CWE-22 CVE-2025-4912: A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/core/update_student.php of the component Image File Handler. The manipulation of the argument old_photo leads to path traversal. The attack can be launched remote

CVE-2025-4898 [MEDIUM] CWE-22 CVE-2025-4898: A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declar A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects the function unlink of the file update_system.php of the component Logo File Handler. The manipulation of the argument old_logo leads to path traversal. The attack can be initiated remotely. The exploit has been

CVE-2025-4720 [MEDIUM] CWE-22 CVE-2025-4720: A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declar A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file academic/core/drop_student.php. The manipulation of the argument img leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may b