CVE-2026-90526 in School Registration and Fee System

Prediction

by VulDB Data Team • 09/12/2026

A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/save_class.php. The manipulation of the argument Category leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-403116
• CPE: ready
• CWE: CWE-89 (confirmed)
• Exploit: Download
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-90526
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-90526
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-90526/