PT-2026-29221 · Code Projects · Student Membership System

Nomath · Published 2026-03-31 · Updated 2026-03-31 · CVE-2026-5198

Mitre

CVSS v3.1

7.3

High

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was determined in code-projects Student Membership System 1.0. The impacted element is an unknown function of the file /admin/index.php of the component Admin Login. This manipulation of the argument username/password causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-5198

Affected Products

Student Membership System

References · 6

• 🔥 https://github.com/maidangdang1/CVE/issues/4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5198 · Security Note
• https://vuldb.com/submit/780403 · Note
• https://vuldb.com/vuln/354296/cti · Note
• https://code-projects.org · Note
• https://vuldb.com/vuln/354296 · Note