CVE-2026-18896: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.php. Executing a manipulation of the argument oldpass can lead to sql injection. It is possible to launch the attack remotely. The exploit...

PT-2026-67936

Name of the Vulnerable Software and Affected Versions lavkush-maurya Student-Registration-System version 1.0 Description A remote SQL injection is possible through the manipulation of the oldpass variable within an unknown function of the '/student/changepass.php' endpoint. SQL injection is a...