CVE-2026-10620 in Student Admission System

Resumen

por MITRE • 2026-06-03

A flaw has been found in code-projects Student Admission System 1.0. Affected is an unknown function of the file /index.php. This manipulation of the argument eid/did causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsable: VulDB
• Divulgación: 2026-06-03
• Moderación: aceptado
• Artículo: VDB-367928
• CPE: listo
• CWE: CWE-89 (confirmado)
• Explotación: Descargar
• CVSS: 7.3 (VulDB)
• EPSS: 0.00036
• KEV: no
• Actividades: bajo
• Sector: Lawfirm, Education, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-10620
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-10620
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-10620/