SQL Injection Vulnerability in Login Component of Raisulislamg4 Student Management System
CVE-2026-10225

6.9MEDIUM

Key Information:

Vendor: Raisulislamg4
Status: Student Management System By PHP
Vendor: CVE Published:; 1 June 2026

🔔 Create Raisulislamg4 Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-10225?

A vulnerability was discovered in the Raisulislamg4 student management system, specifically affecting the login_check.php file within the Login component. This security flaw allows attackers to manipulate the Username argument, potentially leading to SQL injection attacks. As a result, unauthorized access to sensitive information may be achieved. The vulnerability can be exploited remotely, raising significant security concerns. Despite the project's release model that promises continuous updates, specific information regarding patched versions is currently unavailable. The vulnerability has been publicly disclosed, increasing the urgency for users to assess their exposure and mitigate risks.

Affected Version(s)

student_management_system_by_php 310d950e09013d5133c6b9210aff9444382d16d1

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-10225 - Proof of Concept