PT-2026-29214 · Code Projects · Student Membership System

Nomath · Published 2026-03-31 · Updated 2026-03-31 · CVE-2026-5196

Mitre

CVSS v3.1

6.3

Medium

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability has been found in code-projects Student Membership System 1.0. Impacted is an unknown function of the file /delete member.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-5196

Affected Products

Student Membership System

References · 6

• 🔥 https://github.com/maidangdang1/CVE/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5196 · Security Note
• https://vuldb.com/submit/780399 · Note
• https://vuldb.com/vuln/354294 · Note
• https://vuldb.com/vuln/354294/cti · Note
• https://code-projects.org · Note