A vulnerability marked as critical has been reported in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/import_users.php of the component Bulk Import. This manipulation of the argument File causes improper access controls.

This vulnerability is registered as CVE-2026-2983. Remote exploitation of the attack is possible. Furthermore, an exploit is available.