Description

A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This manipulation of the argument email causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "7.3",
  "pubDate": "2026-09-06T13:17:10.667Z",
  "pubdate": "2026-09-06T13:17:10.667Z",
  "executiveSummary": "A critical improper authentication vulnerability exists within the Mstfakts College-Management-System, specifically impacting the Front-end/login.php component. The vulnerability arises due to the improper handling of user-supplied input via the 'email' argument, which allows an unauthorized remote attacker to bypass authentication mechanisms.\nGiven that the application utilizes a rolling release model, no specific version identifiers are available, suggesting that all current instances are potentially susceptible to exploitation. This vulnerability presents a significant security risk, as it allows attackers to gain unauthorized access to the system without legitimate credentials. The exploit is currently publicly disclosed, increasing the risk of active exploitation by malicious actors. Successful exploitation requires no prior authentication or elevated privileges, and the vulnerability is reachable over a network, making it a high-priority threat for organizations utilizing this software.",
  "technicalDetails": "The vulnerability resides in the Front-end/login.php file, which serves as the primary gateway for user session establishment in the Mstfakts College-Management-System. The root cause is a failure in the authentication logic to properly validate and sanitize the input provided through the 'email' parameter during the login sequence. By manipulating this argument, an attacker can circumvent the application's verification process, effectively bypassing the requirement for a valid password or secure token validation.\nExploitation is conducted remotely via standard network protocols (HTTP/HTTPS). An attacker targets the login endpoint by crafting a malicious request that injects unexpected input into the 'email' field. Due to inadequate server-side validation, the backend authentication logic fails to verify the integrity of the user's identity, resulting in the system granting unauthorized access to the session associated with the manipulated email address. The specific nature of the flaw suggests a logic error where the application may trust user-provided identifiers without verifying them against an internal database or authentication provider.\nThe attack flow follows these steps: 1. The attacker identifies the target Front-end/login.php endpoint. 2. The attacker submits a specially crafted request containing a target email address in the 'email' argument. 3. The server-side script fails to perform adequate credential verification, trusting the input supplied in the request. 4. The server inadvertently validates the session or authentication state, providing the attacker with access to the application as the target user. 5. The attacker gains unauthorized access to application functions, which may include sensitive student or administrative data depending on the account permissions associated with the manipulated email address. As this software follows a rolling release schedule, the vulnerability likely persists across all deployments until a code-level fix is implemented within the authentication module of the login file."
}