CVE-2026-86518

MediumCVSS 6.3

Published: 08/09/2026(UTC)Translated: 08/09/2026(UTC)NVD NIST

Summary

A vulnerability in code-projects Student Crud Operation 1.0 affects an unknown function of the file /edit.php. Manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely, and the exploit has been disclosed publicly.

Risk Assessment

SQL injection may allow an attacker to modify or steal database data, potentially leading to serious security breaches.

Recommendation

Apply patches immediately, use parameterized queries, and restrict access to /edit.php.

Other vulnerabilities in code-projects Student Crud Operation

CVE-2026-86519Medium
A vulnerability in code-projects Student Crud Operation 1.0 affects an unknown function of the file /card_activation.sql in the Backup File Handler component. Manipulation leads to information disclosure. The attack can be launched remotely, and the exploit has been made public.

Original NVD description (English source)

A vulnerability has been found in code-projects Student Crud Operation 1.0. This affects an unknown function of the file /edit.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.