CVE-2026-117028

Full vulnerability record from the local CVENow database.

Description

Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method. An authenticated student can manipulate the studentId parameter to retrieve another student's examination results, including examination marks, without authorization.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

[email protected]

Published

2026-10-30 14:16:39.553000

Last modified

2026-10-30 14:16:39.553000

View original CVE JSON

{
  "id": "CVE-2026-117028",
  "sourceIdentifier": "[email protected]",
  "published": "2026-10-30T14:16:39.553",
  "lastModified": "2026-10-30T14:16:39.553",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method. An authenticated student can manipulate the studentId parameter to retrieve another student's examination results, including examination marks, without authorization."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://github.com/dollarboysushil/cve/blob/main/CVE-2026-117028.md",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/yungifez/skuul",
      "source": "[email protected]"
    }
  ]
}