PT-2026-47452 · Codeastro · Attendance Management System

Schneidergrace · Published 2026-06-08 · Updated 2026-06-08 · CVE-2026-11585

Mitre

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability was determined in CodeAstro Student Attendance Management System 1.0. Affected is an unknown function of the file /attendance-php/Admin/createClassArms.php. This manipulation of the argument classId causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-11585

Affected Products

Attendance Management System

References · 7

• 🔥 https://github.com/Andelstander/cve/issues/10 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-11585 · Security Note
• https://vuldb.com/submit/836800 · Note
• https://codeastro.com · Note
• https://vuldb.com/vuln/369182 · Note
• https://vuldb.com/vuln/369182/cti · Note
• https://vuldb.com/cve/CVE-2026-11585 · Note