CVE-2026-18896

creationtimestamp| type| source ---|---|--- 2026-08-05 02:36:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bpk4apcdf5lm7...

CVE-2026-18896 lavkush-maurya Student-Registration-System changepass.php sql injection

A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.php. Executing a manipulation of the argument oldpass can lead to sql injection. It is possible to launch the attack remotely. The exploit...