CVE-2026-86213

A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqliquery of the file Front-end/university.php of the component Search Handler. The manipulation of the argument bookname/bookauthor results in sql injection. The attack may be performed from remote...

CVE-2026-86213 Mstfakts College-Management-System Search university.php mysqli_query sql injection

A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqliquery of the file Front-end/university.php of the component Search Handler. The manipulation of the argument bookname/bookauthor results in sql injection. The attack may be performed from remote...

CVE-2026-86213 Mstfakts College-Management-System Search university.php mysqli_query sql injection

A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqliquery of the file Front-end/university.php of the component Search Handler. The manipulation of the argument bookname/bookauthor results in sql injection. The attack may be performed from remote...

CVE-2026-86213

CVE-2026-86213 is a remote SQL injection in Mstfakts College-Management-System , specifically in the mysqli_query function within Front-end/university.php (Search Handler component). Manipulating the book_name or book_author arguments allows unauthenticated attackers to execute arbitrary SQL quer...

CVE-2026-86213 Mstfakts College-Management-System Search university.php mysqli_query sql injection

A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqliquery of the file Front-end/university.php of the component Search Handler. The manipulation of the argument bookname/bookauthor results in sql injection. The attack may be performed from remote...

CVE-2026-86213: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqliquery of the file Front-end/university.php of the component Search Handler. The manipulation of the argument bookname/bookauthor results in sql injection. The attack may be performed from remote...

CVE-2025-1850

Codezips College Management System 1.0 contains a SQL injection in /university.php via the book_name parameter. The issue is remotely exploitable and the exploit has been disclosed publicly. The vulnerability affects the unrelated /university.php functionality and may impact data confidentiality,...

CVE-2025-1850 Codezips College Management System university.php sql injection

A vulnerability, which was classified as critical, has been found in Codezips College Management System 1.0. Affected by this issue is some unknown functionality of the file /university.php. The manipulation of the argument bookname leads to sql injection. The attack may be launched remotely. The...

CVE-2025-1850 Codezips College Management System university.php sql injection

A vulnerability, which was classified as critical, has been found in Codezips College Management System 1.0. Affected by this issue is some unknown functionality of the file /university.php. The manipulation of the argument bookname leads to sql injection. The attack may be launched remotely. The...

PT-2025-9271

Name of the Vulnerable Software and Affected Versions Codezips College Management System version 1.0 Description A critical issue has been found in the Codezips College Management System, affecting some unknown functionality of the file /university.php. The manipulation of the book name argument...

CVE-2025-1850: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Codezips College Management System 1.0. Affected by this issue is some unknown functionality of the file /university.php. The manipulation of the argument bookname leads to sql injection. The attack may be launched remotely. The...