CVE-2026-97647 | ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf user/editLog.php sid/addtime/type/reason/detail/logdate authorization (Issue 10)

September 24, 2026 Yanac

A vulnerability labeled as problematic has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This impacts an unknown function of the file user/editLog.php. Such manipulation of the argument sid/addtime/type/reason/detail/logdate leads to authorization bypass.

This vulnerability is listed as CVE-2026-97647. The attack may be performed from remote. In addition, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More