Authorization Bypass in ningzichun student-management-system

The ningzichun student-management-system, specifically versions up to commit 98760f5711cf6dc8b4adca53a9e207ca49b02ebf, contains an authorization bypass vulnerability (CVE-2026-97646). The flaw resides within the admin/fun/getStudent.php file, which fails to properly validate the sid argument during request processing. An unauthenticated remote attacker can exploit this weakness by manipulating the sid parameter to retrieve sensitive student data, bypassing existing access control mechanisms. Publicly available exploit code exists, increasing the risk of exploitation. As of the disclosure date, the project maintainers have not issued a response or a patch to remediate this vulnerability.

Impact

The vulnerability allows unauthorized access to potentially sensitive student information maintained within the system. Successful exploitation leads to a compromise of confidentiality for the student database. Given the availability of public exploits, this flaw poses a high risk for organizations using this software for administrative management of student records.

Recommendation

Prioritized actions for teams using this software:

• Immediately isolate any instances of the ningzichun student-management-system from public internet access.
• Implement a Web Application Firewall (WAF) rule to block or inspect HTTP requests to /admin/fun/getStudent.php containing unexpected or malformed sid parameters.
• Audit access logs for high-frequency requests or anomalous parameter values directed at the identified file.
• If a vendor patch is unavailable, consider restricting administrative panel access to internal IP ranges via network segmentation.