CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се по мрежата, без особени условия, с обикновен потребителски вход и без действие от потребителя.
- Експлоатация: има публичен пример за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
A vulnerability was found in LakshayD02 Hostel-Management-System-PHP up to f87e67c283bab6f718faf2fec6ae39a13bd7036b. This issue affects some unknown processing of the file hostel/index.php of the component Admin Dashboard Page. The manipulation of the argument ID results in missing authorization. The attack can be launched remotely. The exploit has been made public and could be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Засегнати продукти
- LakshayD02 Hostel-Management-System-PHP: f87e67c283bab6f718faf2fec6ae39a13bd7036b
Вид слабост
История
- 4 юни 2026 Публикувано
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-10815
- https://nvd.nist.gov/vuln/detail/CVE-2026-10815
- https://vuldb.com/vuln/368263
- https://vuldb.com/vuln/368263/cti
- https://vuldb.com/cve/CVE-2026-10815
- https://vuldb.com/submit/831780
- https://github.com/LakshayD02/Hostel-Management-System-PHP/issues/1
- https://github.com/LakshayD02/Hostel-Management-System-PHP/