PT-2026-22585 · Unknown · Simple Student Alumni System

Zhang Qi · Published 2026-03-02 · Updated 2026-03-02 · CVE-2026-26697

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Simple Student Alumni System version 1.0

Description The Simple Student Alumni System is susceptible to SQL Injection. This issue affects the /TracerStudy/recordteacher view.php script when handling the teacherID parameter. Exploitation may allow an attacker to manipulate database queries, potentially leading to unauthorized access, data modification, or system compromise.

Recommendations Apply appropriate input validation and sanitization techniques to the teacherID parameter in the /TracerStudy/recordteacher view.php script. Consider using parameterized queries or prepared statements to prevent SQL Injection attacks.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-26697

Affected Products

Simple Student Alumni System

References · 4

• 🔥 https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-student-alumni-system/SQL-5.md · Exploit
• https://osv.dev/vulnerability/CVE-2026-26697 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26697 · Security Note
• https://twitter.com/VulmonFeeds/status/2028483888658387160 · Twitter Post