CVE-2026-82698: sambitraj Student-Management-System aca.sql default password
A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown function of the file aca.sql. Performing a manipulation results in use of default password. Remote exploitation of the attack is possible. The exploit is now public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments of sambitraj Student-Management-System containing the affected aca.sql file are potentially exposed. The issue can be exploited remotely, and no authentication or user interaction is indicated by the supplied severity vector.
What does an attacker need to exploit it?
An attacker can exploit the issue remotely by manipulating the affected aca.sql functionality to use a default password. A public exploit is available, which increases the likelihood of exploitation attempts.
Are fixed versions available?
No affected or fixed release versions are provided because the project uses a rolling-release delivery model. The project was notified through an issue report but had not responded at the time of this record.
How can I determine whether my deployment is affected?
Review the aca.sql file in your deployed source or database setup for default password use. Compare your deployment against the affected project revision 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5 or earlier, as identified in the advisory.