CVE-2026-2983mediumCWE-266CWE-284

CVE-2026-2983: falha de média gravidade em SourceCodester Student Result Management System

SourceCodester Student Result Management System Bulk Import import_users.php access control

Publicada em

Seguir esta CVE+ Monitorar Student Result Management System

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 0.5%
A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/import_users.php of the component Bulk Import. This manipulation of the argument File causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
SourceCodester · Student Result Management System
CVEs relacionadas — SourceCodester Student Result Management System

No mesmo produto, das mais perigosas para as menos.

CVE-2025-4912MEDIUMSourceCodester Student Result Management System Image File update_student.php path traversalEPSS 0.9%CVE-2025-4720MEDIUMSourceCodester Student Result Management System drop_student.php path traversalEPSS 0.7%CVE-2026-2938MEDIUMSourceCodester Student Result Management System update_smtp.php access controlEPSS 0.6%CVE-2025-5649MEDIUMSourceCodester Student Result Management System Register Interface new_user access controlEPSS 0.6%CVE-2025-4898MEDIUMSourceCodester Student Result Management System Logo File update_system.php unlink path traversalEPSS 0.6%CVE-2026-2984MEDIUMSourceCodester Student Result Management System drop_user.php denial of serviceEPSS 0.6%