PT-2026-22602 · Unknown · Simple Student Alumni System

Thirtypenny77 · Published 2026-03-02 · Updated 2026-03-07 · CVE-2026-26694

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Simple Student Alumni System version 1.0

Description The Simple Student Alumni System is susceptible to a SQL Injection issue. This flaw is located in the /TracerStudy/modal view.php file. The vulnerability allows for potential unauthorized access or manipulation of data through crafted SQL queries. The vulnerable parameter is not specified.

Recommendations Apply appropriate input validation and sanitization techniques to the modal view.php file to prevent the injection of malicious SQL code.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-26694

Affected Products

Simple Student Alumni System

References · 9

• 🔥 https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-student-alumni-system/SQL-3.md · Exploit
• https://osv.dev/vulnerability/CVE-2026-26694 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26694 · Security Note
• https://twitter.com/VulmonFeeds/status/2028512046682116601 · Twitter Post
• https://twitter.com/cracbot/status/2030237115364336075 · Twitter Post
• https://twitter.com/cracbot/status/2029874817881817236 · Twitter Post
• https://twitter.com/CVEnew/status/2028500223799034217 · Twitter Post
• https://t.me/cveNotify/153949 · Telegram Post
• https://twitter.com/cracbot/status/2029512359895785823 · Twitter Post