CVE-2026-19710
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
A vulnerability was found in SourceCodester Simple Student Information System. Affected by this vulnerability is an unknown functionality of the file app/admin/departments/view_department.php. Performing a manipulation of the argument ID results in SQL injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Risk Assessment
Risk of unauthorized access to student information system data, including personal data, and potential modification or deletion of data.
Recommendation
Apply vendor-provided patches or restrict access to view_department.php and sanitize input.
Original NVD description (English source)
A vulnerability was found in SourceCodester Simple Student Information System. Affected by this vulnerability is an unknown functionality of the file app/admin/departments/view_department.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.