CVE-2026-11530
imvks786 student_management_system Login index.ph sql injection
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was identified in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. This affects an unknown function of the file /index.ph of the component Login. Such manipulation of the argument usr/pwd leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
| CWE | CWE-89 CWE-74 |
| Vendor | imvks786 |
| Product | student_management_system |
| Published | Jun 8, 2026 |
| Last Updated | Jun 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for imvks786 student_management_system
Be the first to know when new high vulnerabilities affecting imvks786 student_management_system are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
imvks786 / student_management_system
9599b560ad3c3b83e75d328b76bedcd489ef1f46
References
vuldb.com: https://vuldb.com/vuln/369147 vuldb.com: https://vuldb.com/vuln/369147/cti vuldb.com: https://vuldb.com/cve/CVE-2026-11530 vuldb.com: https://vuldb.com/submit/836629 github.com: https://github.com/imvks786/student_management_system/issues/1 github.com: https://github.com/imvks786/student_management_system/
Credits
🔍 Amoda (VulDB User) VulDB CNA Team