Arbitrary file upload in Imranrisal-dev Student-management-system

CVE-2026-18927

A vulnerability was determined in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a29aaf267e7ca97171d6dbb44057bcd7f8c. This affects the function storeProfileImage of the file student_profile_pic.php o…

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-18927?
CVE-2026-18927 is a medium-severity vulnerability in Imranrisal-dev Student-management-system, classified under Improper Access Control. CVSS score: 6.3/10. Published 2026-08-05.
How severe is CVE-2026-18927?
Medium severity. CVSS v3 base score is 6.3 out of 10.