PT-2026-45269 · Unknown · Student Management System By Php

Dede1 · Published 2026-06-01 · Updated 2026-06-01 · CVE-2026-10225

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions raisulislamg4 student management system by php versions prior to 310d950e09013d5133c6b9210aff9444382d16d1

Description An issue exists in the Login component within the 'login check.php' file. A remote attacker can perform SQL injection, which is a technique used to manipulate a database by inserting malicious SQL code into a query, by manipulating the Username argument.

Recommendations Update to a version later than 310d950e09013d5133c6b9210aff9444382d16d1. As a temporary workaround, restrict access to the 'login check.php' file or sanitize the Username input to minimize the risk of exploitation.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-10225

Affected Products

Student Management System By Php

References · 10

• 🔥 https://github.com/raisulislamg4/student_management_system_by_php/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10225 · Security Note
• https://t.me/cveNotify/165417 · Telegram Post
• https://t.me/CVEtracker/55443 · Telegram Post
• https://github.com/raisulislamg4/student_management_system_by_php · Note
• https://vuldb.com/cve/CVE-2026-10225 · Note
• https://vuldb.com/vuln/367504 · Note
• https://vuldb.com/submit/822784 · Note
• https://vuldb.com/vuln/367504/cti · Note
• https://twitter.com/VulmonFeeds/status/2061362809426845735 · Twitter Post