SQL Injection Vulnerability in Simple Student Alumni System by code-projects
CVE-2026-26698

4.9MEDIUM

Key Information:

Vendor

code-projects

Status
Simple Student Alumni System
Vendor
CVE Published:
2 March 2026

What is CVE-2026-26698?

The Simple Student Alumni System version 1.0 by code-projects is susceptible to SQL Injection attacks due to insufficient input validation in the modal_edit.php file. This vulnerability allows attackers to manipulate SQL queries, potentially compromising the integrity of the database and exposing sensitive data. It is crucial for users of this system to implement immediate security measures to protect against exploitation.

References

https://github.com/Thirtypenny77/bug_report/blob/main/cod...

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.