PT-2026-43017 · Unknown · Student Management System

Mortal · Published 2026-05-25 · Updated 2026-05-25 · CVE-2026-9438

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions yashpokharna2555 StudentManagementSystem (affected versions not specified)

Description Improper control of resource identifiers occurs in the file 'courseDel.php' due to the manipulation of the ID argument. This issue allows a remote attacker to perform resource injection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-99

Related Identifiers

CVE-2026-9438

Affected Products

Student Management System

References · 7

• 🔥 https://github.com/yashpokharna2555/StudentManagementSystem/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-9438 · Security Note
• https://github.com/yashpokharna2555/StudentManagementSystem · Note
• https://t.me/CVEtracker/54837 · Telegram Post
• https://vuldb.com/submit/813961 · Note
• https://vuldb.com/vuln/365419 · Note
• https://vuldb.com/vuln/365419/cti · Note