CVE-2026-105807

HighCVSS 7.3

Published: 06/10/2026(UTC)Updated: 06/10/2026(UTC)Translated: 06/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Summary

A vulnerability was found in SourceCodester Simple Student Information System 1.0 in the file searchquery.php. Manipulation leads to SQL injection. The attack can be initiated remotely.

Risk Assessment

An attacker can remotely manipulate SQL queries, potentially leading to unauthorized data access or modification.

Recommendation

Update the system to the latest version or apply patches against SQL injection, e.g., use parameterized queries.

Other vulnerabilities in SourceCodester Simple Student Information System

CVE-2026-105808Low
A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Original NVD description (English source)

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS