CVE-2014-1637: Doug Poulin Command School Student Management System

Medium severity, CVSS 5.0. EPSS: 6.9% chance of exploitation in the next 30 days.

Command School Student Management System 1.06.01 does not properly restrict access to sw/backup/backup_ray2.php, which allows remote attackers to download a database backup via a direct request.

Affected products

• Doug Poulin Command School Student Management System: version 1.06.01 only

Published 2014-01-22. Last modified 2026-06-17.