CVE-2026-10226

Source
https://cve.org/CVERecord?id=CVE-2026-10226
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-10226.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-10226
Published
2026-06-01T05:00:09Z
Modified
2026-10-28T02:30:49Z
Severity
  • 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
raisulislamg4 student_management_system_by_php delete.php sql injection
Details

A flaw has been found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1. Impacted is an unknown function of the file delete.php. Executing a manipulation of the argument user_id/course_id/teacher_id/student_id/application_id can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.

Database specific
{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-74",
        "CWE-89"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/10xxx/CVE-2026-10226.json"
}
References

Affected packages

Git / github.com/raisulislamg4/student_management_system_by_php

Affected ranges

Type
GIT
Repo
https://github.com/raisulislamg4/student_management_system_by_php
Events
Database specific
Show details
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "310d950e09013d5133c6b9210aff9444382d16d1"
                },
                {
                    "last_affected":  "310d950e09013d5133c6b9210aff9444382d16d1"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        }
    ]
}

Affected versions

Other
310d950e09013d5133c6b9210aff9444382d16d1

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-10226.json"