PT-2026-22602 · Unknown · Simple Student Alumni System

Thirtypenny77 · Publicado 2026-03-02 · Atualizado 2026-03-07 · CVE-2026-26694

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Simple Student Alumni System version 1.0

Description The Simple Student Alumni System is susceptible to a SQL Injection issue. This flaw is located in the /TracerStudy/modal view.php file. The vulnerability allows for potential unauthorized access or manipulation of data through crafted SQL queries. The vulnerable parameter is not specified.

Recommendations Apply appropriate input validation and sanitization techniques to the modal view.php file to prevent the injection of malicious SQL code.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-26694

Produtos afetados

Simple Student Alumni System

Referências · 9

• 🔥 https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-student-alumni-system/SQL-3.md · Exploit
• https://twitter.com/VulmonFeeds/status/2028512046682116601 · Publicação no Twitter
• https://twitter.com/cracbot/status/2030237115364336075 · Publicação no Twitter
• https://twitter.com/cracbot/status/2029874817881817236 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2028500223799034217 · Publicação no Twitter
• https://t.me/cveNotify/153949 · Publicação no Telegram
• https://twitter.com/cracbot/status/2029512359895785823 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-26694 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-26694 · Nota de Segurança