CVE-2026-82699: sambitraj Student Management System Password aca.sql cleartext storage
A flaw has been found in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This impacts an unknown function of the file aca.sql of the component Password Handler. Executing a manipulation of the argument Password can lead to cleartext storage of sensitive information. The attack can be executed remotely. The exploit has been published and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need?
Exploitation requires high privileges, although the attack can be performed remotely. The vulnerable area is the Password Handler associated with the aca.sql file.
Is exploit code available?
Yes. An exploit has been published and may be used.
How can teams determine whether their deployment is affected?
The issue affects the product up to commit 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Because the product uses a rolling release model, affected and fixed version numbers are not available.