SQL Injection Vulnerability in Soarkey StudentManagement and 学生信息管理系统
CVE-2026-82620

5.3MEDIUM

Key Information:

Vendor: Soarkey
Status: Studentmanagement; 学生信息管理系统
Vendor: CVE Published:; 31 August 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-82620?

A security flaw has been identified in Soarkey StudentManagement and 学生信息管理系统, specifically affecting the function CourseDao.course_ranking located in code/src/dao/CourseDao.java. This vulnerability allows an attacker to manipulate the argument 'cno', thereby executing SQL injection attacks remotely. The exploit has been publicly disclosed, raising concerns about potential misuse. Although the development team was alerted to this issue through a prior report, no response or mitigation has been documented as of now.

Affected Version(s)

StudentManagement e08f7f1d5015af407aa4cca0ada3dea189b4937e

学生信息管理系统 e08f7f1d5015af407aa4cca0ada3dea189b4937e

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-82620 - Proof of Concept