CVE-2026-90849
HighCVSS 7.3Summary
A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. It affects an unknown functionality in the /College/login.php file. Manipulation of the User argument leads to SQL injection. The attack may be initiated remotely, and the exploit has been publicly disclosed.
Risk Assessment
Risk of unauthorized database access, potentially leading to leakage of credentials or other sensitive information.
Recommendation
Apply patches or use parameterized queries. Restrict access to login.php.
Other vulnerabilities in SourceCodester College Notes Gallery Management System
See all- CVE-2026-90857Medium
A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. It affects an unknown function in /dashboard/userprofile.php of the Profile Upload component. Manipulation of the image argument results in unrestricted upload. The attack can be initiated remotely, and the exploit is public.
- CVE-2026-90856High
A vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. It affects an unknown function in the signup.php file of the Registration Flow component. Manipulation of the role argument leads to improper privilege management. The attack can be launched remotely, and the exploit has been publicly disclosed.
Original NVD description (English source)
A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /College/login.php. The manipulation of the argument User leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.