CVE-2026-11335

The record

A flaw has been found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. This impacts the function session_start of the file /login-form.php. Executing a manipulation of the argument UserAuthData can lead to session fixiation. The attack can be launched remotely. The exploit has been published and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.

Affected packages

Related vulnerabilities

• CVE-2026-107226 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP… CWE-384
• CVE-2026-64857 tirreno, a security framework, has a session fixation issue in versions prior to 0.10.0. CWE-384
• CVE-2026-86674 A vulnerability was found in ningzichun Student Management System up to… CWE-384
• CVE-2026-76196 Photoshop Mobile is affected by a Session Fixation vulnerability that could result in… CWE-384
• CVE-2026-86279 A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management &… CWE-384
• CVE-2026-85238 MISP contains a session fixation vulnerability in the CustomAuth authentication (a custom… CWE-384
• CVE-2026-84652 In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the… CWE-384
• CVE-2026-18527 IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i… CWE-384