MEDIUM
SourceCodester Student Result Management System Bulk Import import_users.php access control
Published Feb 23, 2026
6.9
MEDIUMCVSS 4.0
EPSS 0.70%
Description
A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/import_users.php of the component Bulk Import. This manipulation of the argument File causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Affected products
-
- Version 1.0StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| SourceCodester | Student Result Management System | n/a |
|
- 1.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (6)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-7614 Advisory
- https://github.com/Shaon-Xis/SRMS-1.0---Unauthenticated-SMTP-Hijacking-to-Account-Takeover#-vulnerability-2-unauthenticated-bulk-account-injection-arbitrary-file-upload exploitMitigationThird Party Advisory
- https://vuldb.com/?ctiid.347366 signaturepermissions-requiredPermissions RequiredVDB Entry
- https://vuldb.com/?id.347366 vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- https://vuldb.com/?submit.756135 third-party-advisoryThird Party AdvisoryVDB Entry
- https://www.sourcecodester.com/ product
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-7614 | Advisory | |
| https://github.com/Shaon-Xis/SRMS-1.0---Unauthenticated-SMTP-Hijacking-to-Account-Takeover#-vulnerability-2-unauthenticated-bulk-account-injection-arbitrary-file-upload | exploitMitigationThird Party Advisory | |
| https://vuldb.com/?ctiid.347366 | signaturepermissions-requiredPermissions RequiredVDB Entry | |
| https://vuldb.com/?id.347366 | vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry | |
| https://vuldb.com/?submit.756135 | third-party-advisoryThird Party AdvisoryVDB Entry | |
| https://www.sourcecodester.com/ | product |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Feb 23, 2026
Updated Feb 23, 2026
Reserved Feb 22, 2026
Link CVE-2026-2983
CISA Vulnrichment
Updated Feb 23, 2026
ENISA EUVD
EUVD-2026-7614 Assigner VulDB
Published Feb 23, 2026
Updated Feb 23, 2026
Exploited since n/a
Link EUVD-2026-7614