CVE-2026-95828: Mstfakts College-Management-System Authentication server.php session_start session fixiation
A vulnerability was determined in Mstfakts College-Management-System. This affects the function sessionstart of the file Front-end/server.php of the component Authentication. Executing a manipulation can lead to session fixiation. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attack can be launched remotely and requires user interaction. No attacker privileges are required, and public exploit information is available.
Are specific affected or fixed versions known?
No. The project uses rolling releases, and affected and updated version details are not available.
How can teams mitigate the issue if no patched release is identified?
The available information does not provide a workaround or mitigation. Review the Authentication component's Front-end/server.php handling of session_start and monitor the project for a response or remediation.
Has the project acknowledged or fixed the reported issue?
The project was notified early through an issue report but had not responded at the time of publication. No fix information is provided.