Munyweki vulnerabilities
Published CVEs affecting Munyweki products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-2984
Medium · 6.5
CWE-404 Feb 23, 2026
SourceCodester Student Result Management System drop_user.php denial of service
A vulnerability was identified in SourceCodester Student Result Management System 1.0. This affects an unknown function of the file /admin/core/drop_user.php. Such manipulation of the argument ID leads to denial of service. The attack can be executed remotely. The exploit is publicly available and might be used.
CVE-2026-2983
Critical · 9.8
CWE-266 Feb 23, 2026
SourceCodester Student Result Management System Bulk Import import_users.php access control
A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/import_users.php of the component Bulk Import. This manipulation of the argument File causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
CVE-2026-2938
High · 7.3
CWE-266 Feb 22, 2026
SourceCodester Student Result Management System update_smtp.php access control
A vulnerability has been found in SourceCodester Student Result Management System 1.0. The affected element is an unknown function of the file /srms/script/admin/core/update_smtp.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.