CVE-2026-2984CWE-404

SourceCodester Student Result Management System drop_user.php denial of service

Medium · published February 23, 2026

CVSS v4.0
6.9
EPSS
1%
Percentile
53.7
In the wild
Unconfirmed
What it is

A vulnerability was identified in SourceCodester Student Result Management System 1.0. This affects an unknown function of the file /admin/core/drop_user.php. Such manipulation of the argument ID leads to denial of service. The attack can be executed remotely. The exploit is publicly available and might be used.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00729 · 53.7th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2026-02-23T10:02Z
EPSS history
Timeline
  • 23 FEB 10:02Z
    SourceCodester Student Result Management System drop_user.php denial of service
    cvelistv5