SQL Injection Vulnerability in Online Student Management System by Code-Projects
CVE-2026-2171

6.9MEDIUM

Key Information:

Vendor

Code-projects

Status
Online Student Management System
Vendor
CVE Published:
8 February 2026

What is CVE-2026-2171?

A vulnerability has been identified in the Online Student Management System version 1.0 that allows an attacker to inject SQL code through the login interface. The flaw exists in an unspecified function within the accounts.php file, where improper handling of user input (specifically the username and password arguments) can lead to unauthorized database access. This vulnerability can be exploited remotely, potentially allowing attackers to manipulate the database and access sensitive information. Immediate action is recommended to prevent exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Online Student Management System 1.0

References

https://vuldb.com/?id.344872
vdb-entrytechnical-description
https://vuldb.com/?ctiid.344872
signaturepermissions-required
https://vuldb.com/?submit.749233
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

imcoming (VulDB User)
JSON
.