An unauthenticated remote attacker can hijack pre-provisioned academic identities in the Mstfakts College-Management-System, leading to unauthorized access to sensitive personal and academic records.

This is an improper authentication vulnerability (CWE-287) located in the registration logic of Front-end/server.php. The application fails to verify email ownership or authorization during registration, allowing an unauthenticated attacker to link their account to any existing, unclaimed student or lecturer email address.

Successful exploitation grants an attacker full access to the victim's profile, exposing sensitive information such as birth dates, GPAs, student IDs, and library records. Furthermore, the attacker can perform unauthorized actions on behalf of the victim, such as modifying club memberships or academic program data. Given the CVSS score of 7.3, this represents a significant risk to data privacy and institutional integrity.

Immediate Action: As no official patch is available, administrators should immediately restrict public access to the registration page or implement manual verification processes for all new user registrations until the vendor provides a secure update.

Proactive Monitoring: Review database logs for suspicious registration activity, specifically monitoring for account creations that utilize institutional email domains without corresponding verification tokens.

Compensating Controls: Deploy a Web Application Firewall (WAF) to block suspicious POST requests to the registration endpoint and implement strict network-level access controls to limit access to the registration module to authorized campus networks.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the GitHub issue report linked in the CVE references.

The severity of this vulnerability is high due to the potential for complete identity theft and unauthorized access to academic records. Organizations currently running the affected software must treat this as a priority. Since no vendor patch exists, immediate mitigation through restrictive access or disabling the registration feature is the only effective way to prevent unauthorized account takeovers.