PT-2026-45074 · Code Projects · Student Details Management System

Imad Alvi · Published 2026-05-30 · Updated 2026-05-30 · CVE-2026-10110

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was detected in code-projects Student Details Management System 1.0. This affects an unknown function of the file /index.php. Performing a manipulation of the argument roll results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-10110

Affected Products

Student Details Management System

References · 6

• 🔥 https://github.com/Xmyronn/Student-Details-Management-System-1.0---SQL-Injection-Unauthenticated-.git · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10110 · Security Note
• https://code-projects.org · Note
• https://vuldb.com/vuln/367288 · Note
• https://vuldb.com/vuln/367288/cti · Note
• https://vuldb.com/submit/818504 · Note