CVE-2026-6167 in Faculty Management System

Riassunto

di MITRE • 13/04/2026

A vulnerability was detected in code-projects Faculty Management System 1.0. Impacted is an unknown function of the file /subject-print.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsabile: VulDB
• Divulgazione: 13/04/2026
• Moderazione: accettato
• Voce: VDB-357055
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.3 (VulDB)
• EPSS: 0.00254
• KEV: no
• Attività: molto basso
• Settore: Energy, Lawfirm, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-6167
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-6167
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-6167/