PT-2026-45943 · Projectsandprograms · School Management System

Jakub Toczyski · CVE-2026-47325 · Published 2026-06-03 · Updated 2026-06-03

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions ProjectsAndPrograms school-management-system (affected versions not specified)

Description The software uses predictable credentials by generating passwords for students and teachers based solely on the user's date of birth. Additionally, the application does not require users to change their password during the first login, which allows attackers to guess or derive valid credentials to gain unauthorized account access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1391

Related Identifiers

CVE-2026-47325

Affected Products

School Management System

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-47325 · Security Note
• https://cert.pl/en/posts/2026/06/CVE-2026-47324 · Note
• https://t.me/CVEtracker/55722 · Telegram Post
• https://oranbyte.com/projects/school-management-system · Note