Ningzichun vulnerabilities
We track 4 vulnerabilities in Ningzichun products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 25, 2026.
Latest Ningzichun vulnerabilities
- 7.3 High severity
student-management-system: Improper Authorization
A weakness has been identified in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This affects an unknown function of the file admin/fun/getStudent.php. This manipulation of the argument sid causes authorization bypass. The
- 7.3 High severity
Student Management System: Use of Hard-coded Password
A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function mysqli_connect of the file config/database.php of the component Database Connection. This manipulation
- 9.8 Critical severity
Student Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remo
- 9.8 Critical severity
Student Management System: Weak Password Recovery Mechanism for Forgotten Password
A vulnerability was found in ningzichun Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file resetPassword.php of the component Password Reset Handler. The manipulation of the argument s