CVE-2026-86674

A session fixation vulnerability was identified in the ningzichun Student Management System , affecting the session_start function in login.php. The flaw allows a remote attacker to manipulate session identifiers, enabling unauthorized session takeover. The attack requires user interaction and no...

EUVD-2026-74039

A vulnerability was found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is the function sessionstart of the file login.php. The manipulation results in session fixiation. The attack can be launched remotely. The exploit has...

CVE-2026-86674 ningzichun Student Management System login.php session_start session fixiation

A vulnerability was found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is the function sessionstart of the file login.php. The manipulation results in session fixiation. The attack can be launched remotely. The exploit has...

PT-2026-88279

A vulnerability was found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is the function session start of the file login.php. The manipulation results in session fixiation. The attack can be launched remotely. The exploit has...

CVE-2026-86674: Session Fixation

A vulnerability was found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is the function sessionstart of the file login.php. The manipulation results in session fixiation. The attack can be launched remotely. The exploit has...

PT-2026-86624

Name of the Vulnerable Software and Affected Versions itsourcecode School Management System version 1.0 Description A remote SQL injection is possible due to improper handling of the email argument within a function in the User Login.php file. SQL injection is a technique where malicious SQL...

CVE-2026-86214

A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This manipulation of the argument email causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

CVE-2026-86214

Mstfakts College-Management-System is affected by an improper authentication vulnerability in the file Front-end/login.php . The root cause is manipulation of the email argument, allowing a remote attacker with no privileges and low complexity to bypass authentication. Impact is rated MEDIUM (CVS...

EUVD-2026-72128

A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This manipulation of the argument email causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

CVE-2026-86214 Mstfakts College-Management-System login.php improper authentication

A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This manipulation of the argument email causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

CVE-2026-86214 Mstfakts College-Management-System login.php improper authentication

A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This manipulation of the argument email causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

CVE-2026-86168

A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument username results in sql injection. The attack can be executed remotely. The exploit has been released to the...

EUVD-2026-72056

A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument username results in sql injection. The attack can be executed remotely. The exploit has been released to the...

CVE-2026-86168 code-projects Content Management System login.php sql injection

A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument username results in sql injection. The attack can be executed remotely. The exploit has been released to the...

CVE-2026-86168

A SQL injection vulnerability exists in code-projects Content Management System 1.0 , specifically in the user_name parameter of the /login.php file. The flaw can be exploited remotely without authentication , resulting in partial impact to confidentiality, integrity, and availability (CVSS 3.1 s...

CVE-2026-86168 code-projects Content Management System login.php sql injection

A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument username results in sql injection. The attack can be executed remotely. The exploit has been released to the...

PT-2026-86530

A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This manipulation of the argument email causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

PT-2026-86479

A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument user name results in sql injection. The attack can be executed remotely. The exploit has been released to the...

CVE-2026-86214: Improper Authentication

A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This manipulation of the argument email causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

CVE-2026-86168: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument username results in sql injection. The attack can be executed remotely. The exploit has been released to the...