PT-2026-22585 · Unknown · Simple Student Alumni System

Zhang Qi · Publicado 2026-03-02 · Atualizado 2026-03-02 · CVE-2026-26697

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Simple Student Alumni System version 1.0

Description The Simple Student Alumni System is susceptible to SQL Injection. This issue affects the /TracerStudy/recordteacher view.php script when handling the teacherID parameter. Exploitation may allow an attacker to manipulate database queries, potentially leading to unauthorized access, data modification, or system compromise.

Recommendations Apply appropriate input validation and sanitization techniques to the teacherID parameter in the /TracerStudy/recordteacher view.php script. Consider using parameterized queries or prepared statements to prevent SQL Injection attacks.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-26697

Produtos afetados

Simple Student Alumni System

Referências · 4

• 🔥 https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-student-alumni-system/SQL-5.md · Exploit
• https://twitter.com/VulmonFeeds/status/2028483888658387160 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-26697 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-26697 · Nota de Segurança