CVE-2026-18958

HIGH 7.3

imranrisal-dev Student-Management-System Login loginCheckTest.php sql injection

CVSS Score

7.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was detected in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a29aaf267e7ca97171d6dbb44057bcd7f8c. Affected by this vulnerability is an unknown functionality of the file loginCheckTest.php of the component Login. The manipulation of the argument username/password results in sql injection. The attack can be launched remotely. The exploit is now public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-89 CWE-74
Vendor	imranrisal-dev
Product	student-management-system
Published	Aug 5, 2026

Stay Ahead of the Next One

Get instant alerts for imranrisal-dev student-management-system

Be the first to know when new high vulnerabilities affecting imranrisal-dev student-management-system are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

imranrisal-dev / Student-Management-System

18ea7904c339e0c7b0234724a79c939ce6191def a8d43a29aaf267e7ca97171d6dbb44057bcd7f8c

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/386233 vuldb.com: https://vuldb.com/vuln/386233/cti vuldb.com: https://vuldb.com/cve/CVE-2026-18958 vuldb.com: https://vuldb.com/submit/860107 github.com: https://github.com/winterbergnurullah551-sketch/sql-cves/issues/1

Credits

🔍 HackNine (VulDB User) VulDB CNA Team